
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
dsh-simplify
Advanced tools
DeepSeek Harness(dsh)插件:评审最近改动的代码,提升清晰度、一致性与可维护性。 由 Pi 扩展 pi-simplify(MIT)迁移而来,功能等价。
# 在目标 profile 中安装本插件(npm 已发布,包名 dsh-simplify)
dsh plugin --profile web add dsh-simplify
本地开发版安装(源码路径,需先
npm install && npm run build):dsh plugin --profile web add E:\Demo\cli-tools\dsh-simplify
版本要求:Node >= 22.19;宿主 dsh 0.1.1-rc.2 及以上(依赖
dsh-llm ^0.1.1-rc.2)。
注意:
dsh plugin add只更新 profile 清单,不会热加载到已运行的 dsh web 进程, 需重启 dsh web 后/simplify才会注册生效。
| 命令 | 作用 |
|---|---|
/simplify | 评审所有未提交改动(工作区 diff) |
/simplify --staged | 只评审已暂存改动 |
/simplify src/foo.ts src/bar.ts | 指定文件 |
/simplify --ref=main | 对比指定分支的改动 |
执行后,插件把「变更文件 + 变更行范围 + 四条简化原则」作为用户消息注入
当前 agent 会话(next-turn),模型随即按约束在变更行范围内完成简化并跑测试。
--name-status 解析(M/A/R/C),重命名/复制取新路径;工作区模式自动识别未跟踪新增文件(untracked);显式指定的未跟踪文件同样识别为整文件在范围内;--unified=0 解析,相邻区间合并,count=0 跳过,纯删除文件降级提示;--ref="feature branch"、"dir with space/a.ts"),自动规范化 Windows 路径;非 ASCII 文件名(中文等)原样支持(core.quotepath=off);--ref/--staged 取行号;HEAD 无结果时自动回退 HEAD~1,并在 UI 状态与提示词中显式标注回退来源;--ref、非 git 仓库等 git 失败直接以错误提示呈现(含 git 的 fatal 信息),不与「无变更」混淆;npm install # 安装 dependencies(dsh-llm)与 devDependencies(dsh 各 seam 包)
npm run build # tsc 构建到 lib/
npm run typecheck # 类型检查
npm test # 构建 + 功能等价测试(node --test,真实 git 仓库)
依赖版本与宿主闭包(dsh 0.1.1-rc.2)对齐:
@deepseek-ai/dsh-llm为运行时 依赖(createUserMessage),其余 seam 包为构建期类型依赖(devDependencies)。
GitHub Actions CI(.github/workflows/ci.yml,push/PR 自动跑 ubuntu/windows × node 22 测试)
继续保留;仅移除发布 workflow(publish.yml),改为本机发布:
npm run publish:local # patch(默认)
npm run publish:local -- minor # minor
npm run publish:local -- major # major
脚本(scripts/publish.mjs)流程:
npm version 会创建 commit + tag,要求干净);npm version <bump> —— 自动触发 version 钩子跑 npm test,
测试通过后才提交并打 v* 标签;npm publish 发布到 npm(prepublishOnly 钩子保证 lib/ 为最新构建);git push && git push --tags(本机发布不代替推送)。前置:本机已登录 npm(
npm whoami可验证);账号开启 2FA 时按提示输入 OTP。 如果 git 工作区有未提交改动,脚本会中止并列出待处理文件。
变更点、API 映射与验证记录见 MIGRATION.md。
MIT(pi-simplify 为 MIT,本插件延续 MIT)。
FAQs
DeepSeek Harness 插件:评审最近改动的代码,提升清晰度、一致性与可维护性(由 pi-simplify 迁移)。
The npm package dsh-simplify receives a total of 0 weekly downloads. As such, dsh-simplify popularity was classified as not popular.
We found that dsh-simplify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.