
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
dsh-host-files
Advanced tools
Host-side file API for the DSH Web UI: ~19 /vscode-files/* endpoints (list/read/write/search/highlight/docx preview/git status/persona/skills/mcp management). Fork of @anoslide/dsh-host-files with heavy second development.
宿主文件系统接口(服务端插件),约 19 个 /vscode-files/* 端点:
list / read / image / raw / doc(docx/xlsx/pptx→HTML 预览)/ legacy(WPS COM)/ open / reveal / search / highlight(服务端 shiki)/ git / write / mkdir / mkfile / rename / delete(送回收站)/ persona(全局人设)/ skills / mcp(管理接口)
fork 自 anoslide/dsh-vscode-layout (MIT)并二次开发。
| 变量 | 默认 |
|---|---|
| DSH_PYTHON | ~/python/python.exe(找不到用 python) |
| DSH_DOC_CONVERT | ~/.dsh/vscode-doc-convert.py |
| DSH_WPS_CONVERT | ~/.dsh/vscode-wps-convert.ps1 |
docx 预览依赖:pip install python-docx openpyxl python-pptx(脚本见仓库 tools/)。
powershell dsh plugin --profile web add dsh-host-files
MIT。
FAQs
Host-side file API for the DSH Web UI: ~19 /vscode-files/* endpoints (list/read/write/search/highlight/docx preview/git status/persona/skills/mcp management). Fork of @anoslide/dsh-host-files with heavy second development.
We found that dsh-host-files demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.