
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
dsh-context-mode
Advanced tools
dsh-context-mode exposes a self-contained context-mode server as native
DeepSeek Harness tools. It registers the full ctx_* catalog at runtime and
adds model-facing routing guidance, so dsh-TUI can use sandboxed execution,
indexing, FTS5 retrieval, and web fetching without a second MCP client.
The engine is vendored: vendor/context-mode/ carries the source and this
package builds its own server.bundle.mjs from it. There is no context-mode
npm dependency at runtime, and the eighteen upstream platform adapters
(Claude Code, Codex, Cursor, Gemini CLI, …) were removed — DSH is the only
supported host.
Two DSH-specific changes sit on top of the vendored engine:
porter unicode61 and trigram, so
Chinese queries largely fail (a run of Han characters becomes one token, and
the trigram table cannot match two-character words). The adapter segments CJK
text on both sides of the index, which took a five-query Chinese benchmark
from 2/5 to 5/5.See LICENSING.md: the adapter is MIT, the vendored engine is
Elastic License 2.0.
dsh plugin --profile dsh-tui add dsh-context-mode
Restart the profile after installation. Removing the package removes its profile row as well:
dsh plugin --profile dsh-tui remove dsh-context-mode
The npm package ships a prebuilt vendor/context-mode/server.bundle.mjs, so no
build step runs at install time. The bundled skills/context-mode/SKILL.md is
registered with DSH's skill registry when the profile provides the skills
service, so it should appear in /skills after a restart.
The default patch starts the bridge with:
enabled: truecontext-mode/server.bundle.mjs~/.dsh/context-mode as the isolated database rootOverride the row's config in a profile patch when needed:
- id: dsh-context-mode
name: dsh-context-mode
inject: [tools, systemPrompt]
config:
projectDir: /absolute/path/to/worktree
storageDir: /absolute/path/to/context-mode-data
handshakeTimeoutMs: 120000
serverPath is available for local development and pinned deployments. It may
be an absolute path or a path relative to the profile process directory.
The plugin starts one long-lived child process per DSH composition. It performs
MCP initialize and tools/list, registers each returned tool through the DSH
tool registry, and forwards every call over MCP stdio. The child is terminated
when the Cordis plugin is disposed.
Context-mode analysis, indexing, search, and diagnostics tools are marked concurrency-safe so independent model tool calls may overlap. ctx_insight, ctx_purge, and ctx_upgrade remain exclusive because they open external UI or mutate installation and stored data.
ctx_batch_execute additionally parallelizes its own command batch through its concurrency parameter.
All eleven ctx_* capabilities are exposed on DSH — ctx_execute,
ctx_execute_file, ctx_batch_execute, ctx_fetch_and_index, ctx_index,
ctx_search, ctx_stats, ctx_doctor, ctx_upgrade, ctx_purge, and
ctx_insight. Each registered tool carries DSH-specific routing guidance in its
description, and the plugin injects a routing section plus a bundled
context-mode skill so the model reaches for these tools by default.
The adapter targets DSH only. Cross-platform code you may see inside the
context-mode dependency belongs to that package's prebuilt MCP server, which
this adapter does not modify; it ships no Claude Code, Codex, or other host
integration of its own. CONTEXT_MODE_PLATFORM=pi is set solely because upstream
only accepts its own platform ids, and pi is its neutral MCP-only id — every
store stays DSH-owned: CONTEXT_MODE_DIR isolates DSH data and
CONTEXT_MODE_PROJECT_DIR pins project hashing to the configured workspace.
pnpm install
pnpm build
The plugin needs Node ^22.19 || >=24. The upstream package installs
better-sqlite3; a native build may be required on platforms without a
prebuilt binary.
MIT for this adapter. The runtime dependency keeps its own license and terms;
see the upstream context-mode package.
FAQs
Expose context-mode MCP tools as native DeepSeek Harness tools
The npm package dsh-context-mode receives a total of 85 weekly downloads. As such, dsh-context-mode popularity was classified as not popular.
We found that dsh-context-mode demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.