
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
dsh-task-worktree
Advanced tools
Complete Git worktree support for DeepSeek Harness: task-scoped isolated worktrees with per-repo manifests, workspace registration, bring-back to main, direct commit, and durable state. Reference: Qoder / Codex / Claude Code worktrees.
English | 中文
Complete Git worktree support for DeepSeek Harness.
A community plugin that gives DSH the task-scoped worktree workflow of Qoder / Codex / Claude Code: each task gets its own isolated git worktree checkout on its own branch, recorded in a per-repo manifest so it survives sessions and restarts. The main workspace stays untouched; the worktree is registered as a DSH workspace so you can open it from the GUI and work there, then bring the changes back (Move to local) or commit directly on the worktree branch — always under explicit human control.
It follows the design of Qoder's Worktree execution environment, Codex's codex worktree create --permanent, and Claude Code's --worktree sessions, adapted to DSH's session/workspace model.
| Concept (this plugin) | Qoder | Codex | Claude Code |
|---|---|---|---|
| Task-scoped isolated checkout | Worktree execution environment | codex worktree create --permanent | claude --worktree <name> |
Worktrees live in <repo>/.dsh-worktrees/ | background worktree checkout | .codex/worktrees/ | .claude/worktrees/ |
| Durable registry survives restarts | per-session | global index | session binding |
| Own branch per task | branch selector | — | worktree-<name> |
| Open as a DSH workspace from the GUI | panel selector | codex worktree open | launches into the worktree |
| Bring changes back to main | Move to local | — | exit/cleanup prompt |
| Direct commit on the worktree branch | Review & commit panel | commit in the worktree session | commit in the worktree |
| Carry uncommitted main changes in | Include uncommitted changes toggle | — | .worktreeinclude |
| Auto-ignore the worktree directory | — | — | .gitignore tip |
Local session Worktree session (open <.dsh-worktrees/<name>> as workspace)
│ agent calls worktree_create │
├─────────────────────────────────────────────►│ isolated checkout, normal dev & commits
└──────────────────────────────────────────────┴─ done, back to the local session
│
├─ /worktree bring-back <name> → merge worktree branch into the main branch
│ (requires a clean main workspace)
├─ /worktree finish <name> <msg> → commit on the worktree branch, keep it there
└─ /worktree remove <name> → delete the worktree + branch
worktree_create; the name is both the branch and the relative path (slashes allowed, e.g. refactor/logging → .dsh-worktrees/worktree/refactor/logging) and the worktree is registered as a workspace./worktree bring-back <name> — commit any worktree changes onto its branch, then merge the branch back into your current main branch (Qoder's Move to local);/worktree finish <name> <message> — commit directly on the worktree branch and leave it there;/worktree remove <name> (or --force) — delete the worktree and its branch./worktree status / list / prune inspect and clean up.dsh plugin --profile web add dsh-task-worktree
Requires: DeepSeek Harness 0.1.0-rc.7 package line, Git 2.31+, Node 20+.
| Tool | Purpose |
|---|---|
worktree_create {name, baseCommit?, includeUncommitted?} | Create a task worktree (name = branch and relative path, slashes allowed); optionally carry uncommitted main-workspace changes in |
worktree_list | List the repository's managed worktrees (state / dirty / branch) |
worktree_status {name?} | Status of one worktree, or the one the current session is inside |
Delivery and cleanup actions (finish / bring-back / remove) stay human-only — the model never reaches them.
/worktree create <name> [<base>] [--carry]
/worktree list
/worktree status [<name>]
/worktree finish <name> <message>
/worktree bring-back <name> [<message>]
/worktree remove <name> [--force]
/worktree prune
@deepseek-ai/* are peerDependencies only — the host supplies them; the plugin never installs infrastructure copies into a profile (a second instance breaks TOOL_RUNTIME_SCHEDULER's unique symbol and kills tool calls).bring-back requires a clean main workspace (MAIN_DIRTY) and refuses to run from inside the worktree.remove refuses the worktree the current session is working inside (IN_USE).ctx.subprocess (harness-managed); the test path uses a child_process runner.prune drops records whose checkout no longer exists.npm test # smoke test: full lifecycle on a scratch repository
npm pack --dry-run # inspect the tarball before publishing
MIT — see LICENSE
FAQs
Complete Git worktree support for DeepSeek Harness: task-scoped isolated worktrees with per-repo manifests, workspace registration, bring-back to main, direct commit, and durable state. Reference: Qoder / Codex / Claude Code worktrees.
The npm package dsh-task-worktree receives a total of 341 weekly downloads. As such, dsh-task-worktree popularity was classified as not popular.
We found that dsh-task-worktree demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.