
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
dsh-whale-picks-store
Advanced tools
鲸选商店插件:DSH 设置中「Agent 预设」下方的鲸选入口——套件与插件货架、btop 风格九轴米表(CSS 渲染、nord 配色,任意显示器与缩放观感一致)、创始人评分、一键复制安装命令
中文 | English
The 鲸选 store entry inside DSH: a settings section right below Agent Presets that shows the whale-picks shelves — suits and curated plugins with btop-style nine-axis meter charts (CSS-rendered in the nord palette, identical at any display scaling), founder scores and notes, pass findings and one-click-copy install commands. No emoji; the only ASCII art is the whale brand banner.
A whale-picks compliant DSH plugin — see whalepicks.json and the whale-picks SPEC.
dsh plugin --profile web add dsh-whale-picks-store
# restart dsh web once so the new bundle layer takes effect
dsh web
Or from a local checkout:
dsh plugin --profile web add file:/path/to/dsh-whale-picks-store
Then open Settings: the 鲸选 entry sits right below Agent Presets.
dsh plugin add, keeping it out of dsh-market's lane)Cloudflare Workers (see the whale-picks repo's docs/cloudflare.md) with a GitHub-raw fallback. Configure the worker URL in src/client/store-data.ts.
MIT © 2026 Leslie (LeeKai233)
FAQs
鲸选商店插件:DSH 设置中「Agent 预设」下方的鲸选入口——套件与插件货架、btop 风格九轴米表(CSS 渲染、nord 配色,任意显示器与缩放观感一致)、创始人评分、一键复制安装命令
The npm package dsh-whale-picks-store receives a total of 1 weekly downloads. As such, dsh-whale-picks-store popularity was classified as not popular.
We found that dsh-whale-picks-store demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.