Verification
L1 · Found
Risk
Medium
Health
Active
Trust
Unrated
What it does
将code-server(VSCode网页版)打包安装到dsh内的插件,快速实现专业的文件编辑。Package and install code-server (the web version of VSCode) as a plugin within dsh to quickly achieve professional file editing.
Installation
dsh plugin --profile web add dsh-code-server-appInstall method: npm · no verification record (L1-L5)
Compatibility
| DSH Version | Status |
|---|---|
| not stated | no verification record |
Requirements
- • Node.js: not stated
- • DSH: not stated
- • External credentials: none detected
Author badges
Embed the official badges in your README to showcase security & install-test status:
`[](https://www.dsh.so/artifact/dsh-code-server-app/)``[](https://www.dsh.so/artifact/dsh-code-server-app/)`Security Report
Automated static scan, not manual review.
DSH.SO VETMEDIUMbf7e2b
Security reviewAutomated review · daily
MEDIUM
Vet verdict is suspicious: findings need human review (exfiltration endpoints, file deletion, etc.).
0 critical·1 high·1 medium·78 score
plugin version
0.1.2dsh manifestscanned commit
bf7e2bff31a22026-08-26latest commit
bf7e2bff31a2vet verdict
suspicious · npmscore 78Vet is an AST static scan (npm artifact or git source).
Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
Risk details
| Risk | Rule | Location | Description |
|---|---|---|---|
| high | R10 | package.json | install 钩子:package.json scripts.postinstall(安装期任意代码执行面) |
| medium | R11 | index.js:220 | 删除文件操作:fs.rmSync(清理操作常见,交由 LLM 审计复核上下文) |
Heuristic static scan — may produce false positives. Review the source yourself before trusting.
Activity
Last commit 2026-08-26 · activity: Active
• Repo created: 2026-08-26
• Stars: ★ 1 · Forks: 0
• Health: Active — committed within last 30 days
