
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
DeepSeek Harness (dsh) Windows notification plugin: a native toast when the agent stops running (finished / aborted / error / waiting for your choice / session closed), plus a system-tray icon. Pure host-side, zero dependencies, zero build.
⚠️ AI 生成项目:代码与文档由 AI 辅助生成,仅供学习参考,使用前请自行审查。
dsh 的 Windows 通知插件:agent 不再运行时(完成 / 停止 / 出错 / 等你选择 / 会话关闭)弹原生 Toast 提醒,正文标注「工作区 · 会话」,托盘常驻鲸鱼图标。
dsh plugin --profile web add dsh-notify
GitHub 安装:dsh plugin --profile web add github:Pasumao/dsh-plugin-notify
装完重启 dsh web,任务栏出现鲸鱼图标即生效。
任务完成、被中止、执行出错、达到输出上限、停下来等你选择、运行中的会话被关闭。
在 profile 的 cordis.patch.yml 按 id dsh-plugin-notify 覆盖 config。常用项:
| key | 默认 | 说明 |
|---|---|---|
cooldownMs | 10000 | 同会话同类型两次通知的最小间隔(毫秒) |
rootsOnly | true | 仅根会话通知,子代理不刷屏 |
tray | true | 托盘图标开关 |
titlePrefix | 'dsh' | 通知标题前缀 |
node scripts/test-harness.mjs # 弹三条真实 Toast 自测
Toast 不出现:检查 Windows「通知与操作」是否允许 PowerShell 显示通知。
FAQs
Native Windows toast + system tray for DeepSeek Harness (dsh): the only dsh plugin with a tray icon. Pops the moment the agent stops running — finished / aborted / error / output limit / waiting for your choice / session closed — body labeled with workspa
The npm package dsh-notify receives a total of 139 weekly downloads. As such, dsh-notify popularity was classified as not popular.
We found that dsh-notify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.