
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
dsh-plugin-codegraph-tool
Advanced tools
Model-facing codegraph tools for DeepSeek Harness — a read-only codegraph tool with ten structural query operations plus a codegraph_index tool that builds or refreshes the index on its own timeout budget
The model-facing tools: a read-only codegraph tool with ten structural query operations, plus a codegraph_index tool that builds or refreshes the index on its own, much larger timeout budget.
Part of dsh-plugin-codegraph — structural code intelligence for DeepSeek Harness.
Most users should install the bundle instead, which mounts this package and its siblings in one layer:
dsh plugin --profile <name> add dsh-plugin-codegraph
See the project README for setup, configuration, and the full tool reference.
FAQs
Model-facing codegraph tools for DeepSeek Harness — a read-only codegraph tool with ten structural query operations plus a codegraph_index tool that builds or refreshes the index on its own timeout budget
The npm package dsh-plugin-codegraph-tool receives a total of 62 weekly downloads. As such, dsh-plugin-codegraph-tool popularity was classified as not popular.
We found that dsh-plugin-codegraph-tool demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.