dsh-runnpu

检测报告

能力清单

• 含混淆或编码代码obfuscated-code需留意188 处命中
  • dist/chunk-GJSGPQNW.mjs:1import{a as $,e as v}from"./chunk-JLZMOSQC.mjs";import{c as R}from"./chunk-4CZL4IT4.mjs";import{readFile as ne,writeFile…
  • dist/chunk-GJSGPQNW.mjs:2`,r=`${this.#n}.${G().slice(0,8)}.tmp`;await ie(r,e,"utf8");try{await ae(r,this.#n)}catch(s){throw await ue(r,{force:!0}…
  • dist/chunk-JLZMOSQC.mjs:1var h=["overview.trends","node.metrics","workload.metrics"],k=["utilization","allocation","storage","workloads"],w={cpu:…
  • dist/chunk-KQBXZKCA.mjs:1import{e as o}from"./chunk-MGSEPBNR.mjs";var h=Object.freeze({compute:Object.freeze({id:"compute",name:"\u7B97\u529B\u7B…
  • 混淆本身不是恶意，但公开源码里出现大段混淆值得问一句为什么。
• 发起网络请求network需留意2 处命中
  • dist/chunk-YKASEMP3.mjs:1import{a as G}from"./chunk-JZXLCA2E.mjs";var z={};G(z,{QUERIES:()=>C,RunNpuError:()=>l,cluster:()=>E,deleteWorkload:()=>…
  • dist/connectors.mjs:3`);try{return JSON.parse(i)}catch{}}throw new Error("no JSON document in output")}async function D(n,e){return await d(n…
  • 看请求发往哪些域名。发往作者自己的后端是常见做法。
• 接触凭据或密钥credentials一般20 处命中
  • dist/compute-node.mjs:1import{a as E,b as G}from"./chunk-KQBXZKCA.mjs";import{b as N,e as $,f as j,g as F}from"./chunk-ZA65VWZ4.mjs";import{a a…
  • dist/connectors.mjs:1import{a as v,b as L,c as I,d as N,e as O,f as C,g as P,h as B,i as W,j as K,l as $,m as j,n as R}from"./chunk-YKASEMP3.…
  • dist/connectors.mjs:3`);try{return JSON.parse(i)}catch{}}throw new Error("no JSON document in output")}async function D(n,e){return await d(n…
  • dist/training-node.mjs:1import{a as O,b as U}from"./chunk-KQBXZKCA.mjs";import{a as P,b as N,c as C,d as x,f as G,g as z,h as F,i as W}from"./ch…
  • 看它读取哪些凭据、发往哪里。用于登录自己的服务是正常的。
• 读取环境变量reads-env一般16 处命中
  • dist/chunk-4CZL4IT4.mjs:1import{randomUUID as K}from"node:crypto";import{readFile as k,writeFile as m,mkdir as g,chmod as R,readdir as P,rename a…
  • dist/chunk-4CZL4IT4.mjs:3`,"utf8"),n}async function V(e,n){let r=await D(e),i={...await f(s(r,"config.json"))??{},...n,updatedAt:new Date().toISO…
  • dist/connectors.mjs:1import{a as v,b as L,c as I,d as N,e as O,f as C,g as P,h as B,i as W,j as K,l as $,m as j,n as R}from"./chunk-YKASEMP3.…
  • dist/dsh-runnpu.mjs:3`)){let i=r.trim().match(/^([0-9a-f]{64})\s+\*?(.+)$/i);if(i&&i[2].trim()===e)return i[1].toLowerCase()}}function K(n){l…
  • 环境变量里常混有密钥。看它是否把整个 env 都读走。
• 文中出现远程脚本地址remote-url-reference一般4 处命中
  • …de/preset/skills/runnpu/SKILL.md:26`curl -fsSL https://github.com/EM-GeekLab/run-npu-skill/releases/latest/download/install.sh | sh -s -- --no-skill`
  • …de/preset/skills/runnpu/SKILL.md:27（Windows：`irm https://github.com/EM-GeekLab/run-npu-skill/releases/latest/download/install.ps1 | iex`）。
  • …de/preset/skills/runnpu/SKILL.md:26`curl -fsSL https://github.com/EM-GeekLab/run-npu-skill/releases/latest/download/install.sh | sh -s -- --no-skill`
  • …de/preset/skills/runnpu/SKILL.md:27（Windows：`irm https://github.com/EM-GeekLab/run-npu-skill/releases/latest/download/install.ps1 | iex`）。
  • 只是文本里出现了远程脚本地址，没有看到加载它的调用。多半是文档或注释；若确实可疑，搜一下这个地址在包里的其他出现位置。

这份报告的口径

扫描读的是包里的源码，全程不执行第三方代码。 本次读了 61 个文件，扫描于 2026-10-16。 命中次数只说明源码里出现过这类调用，不说明行为好坏——一个插件读写文件 500 次和 1 次 都会被记为「读取文件」。这是能力清单，不是信任评分，也不是安全结论： 没扫出来的能力可能只是写法没被规则覆盖。

依赖安全公告

已查询这个插件声明的全部依赖，没有匹配到已公开的安全公告。（含 DSH 框架包在内的 @deepseek-ai/* 不作查询——那是运行时自己的问题，不是插件的。）

可信度

• 0没有可扣分的项