
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
DeepSeek Harness (dsh) Windows notification plugin: a native toast when the agent stops running (finished / aborted / error / waiting for your choice / session closed), plus a system-tray icon. Pure host-side, zero dependencies, zero build.
唯一带系统托盘的 Windows 原生通知插件:agent 不再运行时(完成 / 停止 / 出错 / 等你选择 / 会话关闭)自动弹原生 Toast,正文标注「工作区 · 会话」,任务栏托盘常驻鲸鱼图标——跑长任务时切走窗口,瞄一眼托盘就知道跑完了没。
零运行时依赖、零构建,dsh plugin add 一条命令装完即用。
rootsOnly 默认仅根会话通知,子代理不刷屏;cooldownMs 同会话同类型两次通知最小间隔;dsh plugin add 一条命令装完即用。rootsOnly: true 默认值,需要观察子代理时再关掉。dsh plugin --profile web add dsh-notify
GitHub 安装:dsh plugin --profile web add github:Pasumao/dsh-plugin-notify
源码安装(本地开发 / 调试):
git clone https://github.com/Pasumao/dsh-plugin-notify.git
cd dsh-plugin-notify
npm install
# 以 link: 方式挂载进 profile(包名 dsh-notify)
装完重启 dsh web,任务栏出现鲸鱼图标即生效。
任务完成、被中止、执行出错、达到输出上限、停下来等你选择、运行中的会话被关闭。
在 profile 的 cordis.patch.yml 按 id dsh-plugin-notify 覆盖 config。常用项:
| key | 默认 | 说明 |
|---|---|---|
cooldownMs | 10000 | 同会话同类型两次通知的最小间隔(毫秒) |
rootsOnly | true | 仅根会话通知,子代理不刷屏 |
tray | true | 托盘图标开关 |
titlePrefix | 'dsh' | 通知标题前缀 |
node scripts/test-harness.mjs # 弹三条真实 Toast 自测
rootsOnly: true;需要观察子代理时再改为 false;cooldownMs(默认 10000ms)即可;tray: true 配置项是否被覆盖。Toast 不出现:检查 Windows「通知与操作」是否允许 PowerShell 显示通知。
本插件属于 Pasumao 的 dsh 插件生态,同系列已发布插件可搭配使用:
| 插件(npm) | GitHub | 说明 |
|---|---|---|
| dsh-plugin-choice-refresh | GitHub 仓库 | 选择增强:重新生成选项 / 更多选项 |
| dsh-plugin-dev-kb | GitHub 仓库 | 插件开发知识库(官方文档完整镜像 + 技能) |
| dsh-plugin-image-tools | GitHub 仓库 | 图片选择卡 + 回复内嵌图片 + 盲模型收图 |
| dsh-plugin-table-zoom | GitHub 仓库 | 聊天长表格浮窗查看 + 一键复制 Markdown |
| dsh-plugin-windows-guard | GitHub 仓库 | Windows 环境防坑守则 skill(编码/转义/路径/进程/乱码预防) |
| dsh-plugin-workbench | GitHub 仓库 | VS Code 风格文件浏览器 + 可编辑预览 |
本系列其余插件见 Pasumao · dsh 插件;觉得好用欢迎到 GitHub 点 ⭐。
代码与文档由 AI 辅助生成(DeepSeek Harness),均经人工审查与实机验证
(scripts/test-harness.mjs 弹真实 Toast 自测)。
FAQs
DeepSeek Harness (dsh) Windows notification plugin: a native toast when the agent stops running (finished / aborted / error / waiting for your choice / session closed), plus a system-tray icon. Pure host-side, zero dependencies, zero build.
We found that dsh-notify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.