
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
dsh-netcafe-devkit
Advanced tools
The small deterministic operations an agent needs mid-task. JSON/YAML round-trip, JSON Schema validation, text diff, JWT decode, regex testing, SQL dialect transpiling, QR codes, timezone and unit conversion, page screenshots.
npm 上的包名是
dsh-netcafe-devkit——dsh-devkit已被他人占用。 仓库名不变,dsh plugin add github:...的装法照旧。
JSON/YAML round-trip, JSON Schema validation, text diff, JWT decode, regex testing, SQL dialect transpiling, QR codes, timezone and unit conversion, page screenshots.
These are the operations an agent reaches for in the middle of something else. Doing them by prompting a model is slower, costs more and is not reproducible. transpile_sql runs a real parser (mysql, postgres, bigquery, snowflake, clickhouse, doris, starrocks), so syntax errors come back with line and column instead of a confident rewrite.
Every set ships what_can_you_do — describe a task in any language, get the exact tool plus a ready-to-run call.
dsh plugin --profile <your-profile> add github:mario03690/dsh-devkit
Thin config layer only (one @deepseek-ai/dsh-mcp-client row, shipped as cordis.patch.yml) — no tool code runs on your machine. Built against the MCP client config shape of the dsh v0.1 developer preview; verified against the live endpoint on 2026-08-22.
Mostly $0.001 per call and deterministic. Two exceptions that are not: sql_from_description ($0.01) calls a model, screenshot_url ($0.003) renders a page. Failed calls are not charged.
No signup for the free anonymous quota. Documents are processed in memory and not retained. The config URL carries ?s=dsh-dev — a channel tag identifying the install path, not you.
Disclosure: built and run by the team behind ainetcafe.com — our own service, free tier plus paid usage. Full bundle (everything at once): dsh-netcafe. MIT.
| Signal | This plugin |
|---|---|
| Runtime | dsh v0.1 developer preview (Cordis v4). Touches only the MCP client config shape — the narrowest surface available. Verified against a live endpoint on 2026-08-22. |
| What runs locally | Nothing. Ships one cordis.patch.yml row; there is no tool code, no build step and no lifecycle script in this package. |
| Filesystem access | None. |
| Shell / process access | None. |
| Network access | Outbound HTTPS to ainetcafe.com only, from the MCP client that dsh already ships. |
| Credentials | None required for the free tier. An optional AllRouter key, if you supply one, is sent by dsh as a request header and is never stored by us. |
| Data retention | Documents and prompts are processed in memory and not retained. |
| Dependencies | One peer dependency: @deepseek-ai/dsh-mcp-client (ships with dsh). |
| License | MIT (see LICENSE). |
| Publisher | The team that runs ainetcafe.com. Issues get a same-day reply. |
A directory listing is not a security review. Read
cordis.patch.yml— it is short enough to read in full in under a minute.
FAQs
The small deterministic operations an agent needs mid-task. JSON/YAML round-trip, JSON Schema validation, text diff, JWT decode, regex testing, SQL dialect transpiling, QR codes, timezone and unit conversion, page screenshots.
We found that dsh-netcafe-devkit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.