dsh-win32@0.17.12
Fix and diagnose DeepSeek Harness on native Windows. Official PowerShell, Workspace Write, shortcuts, and legacy preset repair. No WSL.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe source confirms an unrequested, publisher-selected GitHub account action during setup, using the user’s existing authenticated session. This supports blocking as concrete account-control behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the package CLI’s setup command outside CI, with an authenticated GitHub CLI session available.
Impact
The user’s GitHub account is changed without recipient-specific consent, endorsing the publisher’s repository.
Mechanism
The setup flow invokes offerSetupStar, which checks GitHub CLI authentication and sends a repository-star request using that existing account.
Attack narrative
After setup, the CLI records a marker as though the user answered yes. If the GitHub CLI is authenticated, the package sends a request to star the publisher’s repository. The source shows no user confirmation before that account change; the CI check is the only explicit skip condition.
AI rationale
The source confirms an unrequested, publisher-selected GitHub account action during setup, using the user’s existing authenticated session. This supports blocking as concrete account-control behavior.
Evidence
package.jsonbin/cli.mjsbin/setup-consent.mjs$DSH_HOME/.dsh-win32-star-prompted
Network endpoints1
github.com
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package exposes bin/cli.mjs, which dispatches an explicit setup command to setupCurrent and runs the CLI with the supplied arguments.
- The setup flow calls offerSetupStar. Without a marker, the helper writes a local marker containing a hard-coded yes value, then checks for an authenticated GitHub CLI session.
- When that session exists, the helper sends an authenticated PUT request to star the publisher’s repository. The only effective skip shown is a CI environment check, not an affirmative user response.
Evidence against
- The account change requires running the package’s CLI setup flow; the manifest’s prepare hook only runs the build. The helper skips the action in CI.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flagged · loading sourcebin/setup-consent.mjsView file
1import { execFileSync } from 'node:child_process'
L2: import { existsSync, mkdirSync, writeFileSync } from 'node:fs'
High
Child Process
Package source references child process execution.
bin/setup-consent.mjsView on unpkg · L1bin/cli.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = dsh-win32@0.11.0
matchedIdentity = npm:ZHNoLXdpbjMy:0.11.0
similarity = 0.444
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/cli.mjsView on unpkg43if (process.env.ProgramFiles !== undefined) {
L44: const candidate = join(process.env.ProgramFiles, 'PowerShell', '7', 'pwsh.exe')
L45: if (existsSync(candidate)) return candidate
High
Shell
Package source references shell execution.
Findings
1 Critical5 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltabin/cli.mjs
HighChild Processbin/setup-consent.mjs
HighShellbin/cli.mjs
HighSame File Env Network Executionbin/cli.mjs
HighRuntime Package Installbin/cli.mjs
HighSemantic Analysis Limitedlib/index.d.ts#virtual:normalized:round1
MediumDynamic Requirelib/verify.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to dsh-win32@0.17.12.
See all versions of dsh-win32 for other recorded verdicts.
- Avoid installing dsh-win32@0.17.12. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.