
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
This is an external Cordis plugin. It registers the internal per-turn provider
route mock with the mock model and routes accepted /mock run and /mock replay
commands through the public AgentLoop request waterfall. The route is
deliberately omitted from the advertised model catalog, so the normal model
selector remains unchanged; only the slash command activates it. The plugin
also registers mock in the public slash-command catalog, and its command
handler queues the exact line as a normal AgentLoop follow-up. The adapter
emits ordinary model chunks; the host AgentLoop and ToolRuntime execute and
record the actual calls.
Replay is read-only and in-memory. A relative path is resolved against the
current session's absolute session.header.cwd; when that value is missing,
relative paths are rejected. Absolute paths are accepted for read-only input,
and the plugin never creates, copies, rewrites, renames, or deletes a replay
source. --overwrite-wait-time-ms changes only explicit waits in the detached
canonical plan.
The plugin emits ephemeral mock/status events for a host UI bridge. The
bridge should render a compact status row above the existing composer and
leave normal DSH tool/result/error cards authoritative.
FAQs
Deterministic mock LLM adapter for DeepSeek Harness
The npm package dsh-mock receives a total of 0 weekly downloads. As such, dsh-mock popularity was classified as not popular.
We found that dsh-mock demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.