
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
dsh-cli-bridge
Advanced tools
DeepSeek Harness (DSH) plugin that delegates coding tasks to the Claude Code and Codex agent CLIs and streams the whole run live — autonomous control, multi-account, automatic install, git worktrees, and any Anthropic-compatible endpoint.
🟢 ━━ 🔵 ━━ 🟣
the three pillars, bridged
╭───────────────────────────────────────────────────────╮ │ │ │ dsh ⇄ claude code · codex │ │ │ │ Run Claude Code & Codex inside DeepSeek Harness │ │ — watch every step, live │ │ │ │ live · autonomous · zero setup │ │ │ ╰───────────────────────────────────────────────────────╯
dsh-cli-bridgeThe built-in delegates hand you the final result. This one hands you the whole run.
One tool call from DeepSeek Harness. A real agent doing real work — on screen, in real time, under your control.
dsh-cli-bridge delegates work to Claude Code and Codex, then keeps you
and DeepSeek Harness in the loop for the entire run:
| 📺 Watch it live | 🧠 Give DSH the wheel | 🛠️ Nothing to set up |
|---|---|---|
| Every tool call, every file changed, every line of reasoning streams into DSH as it happens — not a spinner, not a final paste. | DeepSeek Harness can steer, answer, and review the delegate's work on its own, round after round — or hand you the question when it should not decide. | The plugin finds, installs, and updates Claude Code and Codex itself. You install one plugin; it manages the rest. |
[!IMPORTANT] Why this exists — the built-in
claudeandcodexdelegates call the CLI like a tool and return only the final message. The whole run happens in the dark, and the transcript costs you tokens twice.dsh-cli-bridgeputs the run on screen, keeps the transcript out of your model's context, and gives the harness the controls.
| A built-in delegate call | ✨ dsh-cli-bridge |
|---|---|
| ❌ hands back only the final result | ✅ the whole run, streamed live into DSH |
| ❌ DeepSeek just reads the answer | ✅ DeepSeek steers, answers, and reviews the delegate |
| ❌ you install and update the CLIs yourself | ✅ the plugin installs and updates them |
| ❌ one login, configured by hand | ✅ many isolated accounts, side by side |
| ❌ tasks share one workspace | ✅ a git worktree per task, merged back automatically |
| ❌ Claude Code talks to Anthropic only | ✅ Claude Code + Codex, and any Anthropic-compatible endpoint |
The headline is the live run. The rest is what makes it safe to let an agent loose on a repository:
--no-ff, one at a time, conflicts kept for you.dsh plugin --profile web add dsh-cli-bridge
Just ask in the chat — DeepSeek guides you and does most of the setup itself (installing agents, adding accounts, and handing off work).
install button).sign in): type the code into the box that
opens.Manual (default) or hands-off: the Autonomy switches in the panel.
dsh-cli-bridge is free to use and funded by the people it saves money. If
it keeps delegate spend off your model bill, sponsor it.
Source-available — © 2026 hviana. Free to use, funded by sponsors, redistribution gated. The inlined open-source components keep their own licences; see THIRD-PARTY-NOTICES.md.
Source-available · © 2026 hviana ·
sponsor ·
third-party notices
built for
DeepSeek Harness
FAQs
DeepSeek Harness (DSH) plugin that delegates coding tasks to the Claude Code and Codex agent CLIs and streams the whole run live — autonomous control, multi-account, automatic install, git worktrees, and any Anthropic-compatible endpoint.
The npm package dsh-cli-bridge receives a total of 56 weekly downloads. As such, dsh-cli-bridge popularity was classified as not popular.
We found that dsh-cli-bridge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.