
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
Load Claude Code MCP server configs (.mcp.json / plugin.json inline mcpServers) into DSH as runtime-registered tools: project-root .mcp.json → mcp__<server>__<tool>, plugin MCP → mcp__plugin_<name>_<server>__<tool> (official CC naming). Client bridge on t
Load Claude Code MCP server configs into DeepSeek Harness as runtime-registered tools — no config-row writes, no restarts for config changes.
把 Claude Code 的 MCP 配置(.mcp.json / plugin.json 内联 mcpServers)以运行时注册工具的形式加载进 DSH。
| Source | Tool namespace | Notes |
|---|---|---|
Project root .mcp.json | mcp__<server>__<tool> | DSH-native name, same as dsh-mcp-client rows |
Plugin root .mcp.json / plugin.json inline | mcp__plugin_<name>_<server>__<tool> | Official CC plugin naming (e.g. mcp__plugin_asana_asana__asana_create_task) |
dsh-cc-loader): accepts both the
{"mcpServers": {...}} wrapper (project level / community plugins) and the
bare server map (official plugin form).stdio (command) and http (url → streamable-http) register
as tools. sse / ws are reported as unsupported (DSH has no such
transport) and never crash anything.${NAME} placeholders are kept verbatim
in the IR and expanded at runtime from process.env; ${CLAUDE_PLUGIN_ROOT}
expands to the plugin directory. Nothing is written to disk.idleTimeoutMs without calls. Dead connections reconnect on the next
call..mcp.json rebuilds running sessions'
project MCP surface (~1 s).dsh-mcp-client row is skipped by default; "override": true in the server
entry forces the project/plugin connection (agent layer shadows upper
layers)..mcp.json is executable project content — the same trust as
package.json scripts. Installing this plugin enables that. Children run with a
scrubbed environment (credential-shaped and stale DSH_* variables dropped),
mirroring the official bridge.
# in packages/cc-mcp: install deps (official MCP SDK + shared loader)
npm install
# user patch layer (hot, no bundle reconcile):
# append to ~/.dsh/profiles/<profile>/cordis.patch.yml
- insert:
- id: cc-mcp
name: 'dsh-cc-mcp'
config:
enableProject: true
pluginRoots: [] # absolute paths to plugin dirs (future M4 feeds this)
idleTimeoutMs: 300000
toolCallTimeoutMs: 60000
watchProject: true
Windows absolute paths in pluginRoots need file:///? No — these are plain
directory paths inside the config, not module specifiers.
| Field | Default | Meaning |
|---|---|---|
enableProject | true | read <projectRoot>/.mcp.json per session |
pluginRoots | [] | extra plugin directories to scan (.mcp.json + plugin.json) |
idleTimeoutMs | 300000 | idle disconnect (0 = never) |
toolCallTimeoutMs | 60000 | per-call timeout |
watchProject | true | hot-reload the project .mcp.json |
projectRootMarkers | ['.git', '.dsh', '.claude'] | directory names that mark a project root when walking up from the session cwd; the first ancestor containing any marker wins. .dsh / .claude let projects without a .git repo still resolve their root |
<project>/.mcp.json:
{
"mcpServers": {
"github": {
"command": "npx",
"args": ["-y", "@modelcontextprotocol/server-github"],
"env": { "GITHUB_TOKEN": "${GITHUB_TOKEN}" }
}
}
}
Sessions in that project get mcp__github__create_issue etc. on first tool
list assembly.
MIT — runtime registration pattern ported from
dsh-project-mcp-bridge
(MIT, © KYinCode); parsing lives in dsh-cc-loader.
FAQs
Load Claude Code MCP server configs (.mcp.json / plugin.json inline mcpServers) into DSH as runtime-registered tools: project-root .mcp.json → mcp__<server>__<tool>, plugin MCP → mcp__plugin_<name>_<server>__<tool> (official CC naming). Client bridge on t
The npm package dsh-cc-mcp receives a total of 244 weekly downloads. As such, dsh-cc-mcp popularity was classified as not popular.
We found that dsh-cc-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.