
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
dsh-cursor-theme
Advanced tools
Customize the PC mouse cursor for every UI state inside DeepSeek Harness. 在 DSH 里自定义鼠标各种状态的图案。
🖱️ Per-state mouse cursor customization for DeepSeek Harness — give every UI state (default, pointer, text, wait, not-allowed, …) its own PNG/CUR cursor, applied live and persisted across restarts.
中文文档 · Requirements · Feasibility · Published on npm · Listed on DSH 1024Store
manifest.json), inspect/edit/share real image files, or generate with an AISPI_SETCURSORS), visible in Explorer and every app; macOS: experimental Swift overlay + Accessibility guidancenone# DSH Desktop (the GUI runs the `desktop` profile) — also installable from the Community Market (1024Store)
dsh plugin --profile desktop add dsh-cursor-theme
# Plain dsh web / browser (optional)
dsh plugin --profile web add dsh-cursor-theme
Restart DSH Desktop (or reload dsh web), then open Settings → Cursor Theme.
| Action | How |
|---|---|
| Apply a preset theme | Settings → Cursor Theme → click a theme pill |
| Download a theme as ZIP | Click the download icon next to a theme |
| Customize one state | Edit next to a state row → upload PNG/CUR or pick a built-in shape → set hotspot/size |
| Import a ZIP pack | Image pack → Import (e.g. a pack generated by an AI) |
| Apply to the whole OS (Windows) | Apply to system → one click |
| Reset everything | Restore system default |
npm install
npm run check # typecheck + build + test
npm run build # host lib/ + client client/client.js
scripts/theme-art.mjs — original hand-drawn art for the 12 creative themes (per-state SVG + decorators: glow / gloss / dots)scripts/generate-theme-packs.mjs — renders every theme into 32×32 (or 48×48) PNGs via @resvg/resvg-js, emits data/theme-packs/<id>.zip (image packs) + data/themes-<id>.jsonscripts/generate-assets.mjs — merges packs into data/assets.json (built-in preset catalog)client/client.js), with react and @deepseek-ai/* kept external (injected by the host __ModuleLoader__)docs/catalog/manifest.json + docs/catalog/v1/plugins.json — standard DSH Community Market catalog source (v1 contract), deployable to any host that serves JSON with the right content-type (e.g. Cloudflare Pages / Vercel)npm publish (requires a public npm token with bypass 2FA for publishing)├── package.json # dsh.bundle + dsh.client declarations
├── cordis.patch.yml # layer insertion patch
├── docs/
│ ├── feasibility.md # feasibility analysis
│ ├── requirements.md # requirements (draft)
│ └── catalog/ # standard market catalog source
├── src/
│ ├── index.ts # host entry (settings namespace registration)
│ ├── schema.ts # config schema (dsh-settings)
│ ├── system.ts # Windows registry apply / macOS Swift overlay
│ ├── cur.ts # PNG → .cur encoding
│ └── client/ # client (esbuild → single-file client/client.js)
│ ├── index.ts # client entry (style injection + settings.section)
│ ├── section.tsx # settings UI (states/assets/themes/hotspot/size/preview/reset)
│ ├── style.ts # cursor CSS generator
│ ├── states.ts # state → CSS selector mapping
│ ├── assets.ts # built-in asset catalog
│ ├── themes.ts # built-in theme catalog
│ ├── pack.ts # theme pack export/import + validation
│ ├── locales.ts # zh/en dictionaries
│ └── types.ts # client-local structural types
├── scripts/
│ ├── build-client.mjs # esbuild bundle + __ModuleLoader__ banner
│ ├── theme-art.mjs # original creative theme art
│ ├── generate-theme-packs.mjs # PNG rendering → packs + built-in data
│ └── generate-assets.mjs # merge packs into data/assets.json
├── data/ # generated assets (theme packs, built-in catalog)
└── tests/ # unit tests (34)
MIT
FAQs
Customize the PC mouse cursor for every UI state inside DeepSeek Harness. 在 DSH 里自定义鼠标各种状态的图案。
We found that dsh-cursor-theme demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.