
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
dsh-ghost-refresh
Advanced tools
Ghost Refresh (鬼影提神) — a friendly ghost drifts across the page to keep you awake. Adjustable speed / opacity / size / frequency, persisted per browser.
一只友好的小幽灵会定时飘过你的 DeepSeek Harness 网页界面——提神醒脑,防止摸鱼睡着。
A friendly ghost drifts across your DeepSeek Harness web UI at random intervals — a tiny nudge to keep you awake and refreshed.
prefers-reduced-motion 下自动隐藏)dsh plugin --profile web add dsh-ghost-refresh
然后重启 DSH。(desktop profile 把 web 换成 desktop。)
npm 包尚未发布时,也可以直接从 GitHub 安装:
dsh plugin --profile web add github:ZomiCC/ghost-refresh
dsh plugin --profile web remove dsh-ghost-refresh
package.json # dsh.client(浏览器半边)+ dsh.bundle(组合补丁)声明
cordis.patch.yml # 向 profile 插入插件行
lib/index.js # 宿主半边(本插件纯浏览器侧,宿主为空实现)
lib/client.js # 浏览器半边:幽灵图层 + 设置按钮 + localStorage 持久化
FAQs
Ghost Refresh (鬼影提神) — a friendly ghost drifts across the page to keep you awake. Adjustable speed / opacity / size / frequency, persisted per browser.
The npm package dsh-ghost-refresh receives a total of 0 weekly downloads. As such, dsh-ghost-refresh popularity was classified as not popular.
We found that dsh-ghost-refresh demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.