
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
DeepSeek Harness (dsh) Windows notification plugin: a native toast when the agent stops running (finished / aborted / error / waiting for your choice / session closed), plus a system-tray icon. Pure host-side, zero dependencies, zero build.
唯一带系统托盘的 Windows 原生通知插件:agent 不再运行时(完成 / 停止 / 出错 / 等你选择 / 会话关闭)自动弹原生 Toast,正文标注「工作区 · 会话」,任务栏托盘常驻鲸鱼图标——跑长任务时切走窗口,瞄一眼托盘就知道跑完了没。
零运行时依赖、零构建,dsh plugin add 一条命令装完即用。
dsh plugin --profile web add dsh-notify
GitHub 安装:dsh plugin --profile web add github:Pasumao/dsh-plugin-notify
装完重启 dsh web,任务栏出现鲸鱼图标即生效。
任务完成、被中止、执行出错、达到输出上限、停下来等你选择、运行中的会话被关闭。
在 profile 的 cordis.patch.yml 按 id dsh-plugin-notify 覆盖 config。常用项:
| key | 默认 | 说明 |
|---|---|---|
cooldownMs | 10000 | 同会话同类型两次通知的最小间隔(毫秒) |
rootsOnly | true | 仅根会话通知,子代理不刷屏 |
tray | true | 托盘图标开关 |
titlePrefix | 'dsh' | 通知标题前缀 |
node scripts/test-harness.mjs # 弹三条真实 Toast 自测
Toast 不出现:检查 Windows「通知与操作」是否允许 PowerShell 显示通知。
代码与文档由 AI 辅助生成(DeepSeek Harness),均经人工审查与实机验证
(scripts/test-harness.mjs 弹真实 Toast 自测)。
FAQs
Native Windows toast + system tray for DeepSeek Harness (dsh): the only dsh plugin with a tray icon. Pops the moment the agent stops running — finished / aborted / error / output limit / waiting for your choice / session closed — body labeled with workspa
We found that dsh-notify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.