
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
dsh-plugins-dream
Advanced tools
Dream — 4-phase memory consolidation for dsh (port of Claude Code's auto-dream skill): Orient → Gather → Consolidate → Prune&Index over session logs, auto-triggered every 24h.
把 Claude Code 社区著名的 auto-dream skill(grandamenium/dream-skill,模拟 Anthropic 未发布的 auto-dream)移植到 dsh。
~/.dsh/dreams/MEMORY.md后台每小时检查一次:距上次整合 ≥24h 即自动执行整合 pass(fork 子代理,无需用户在场)。
| 工具 | 作用 |
|---|---|
dream_run | 手动执行一次整合 |
dream_status | 上次整合时间、到期倒计时、MEMORY.md 行数、历史记录 |
dream_now | 跳过间隔检查强制整合 |
~/.dsh/dreams/MEMORY.md — 整合后的记忆(纯 markdown,可手动编辑)~/.dsh/dreams/signals/ — 每次 pass 的原始信号~/.dsh/dreams/state.json — 状态FAQs
Dream — 4-phase memory consolidation for dsh (port of Claude Code's auto-dream skill): Orient → Gather → Consolidate → Prune&Index over session logs, auto-triggered every 24h.
The npm package dsh-plugins-dream receives a total of 6 weekly downloads. As such, dsh-plugins-dream popularity was classified as not popular.
We found that dsh-plugins-dream demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.