
Security News
PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
dsw-workshop-plugin
Advanced tools
DeepSeek Harness 的「github-dsh插件市场」插件 —— 浏览、搜索、一键安装 DSH 生态插件。
dsh plugin --profile web add …(npm 优先秒装),已安装插件自动标注「已安装」dsh plugin --profile web add dsw-workshop-plugin
重启 dsh web —— 侧边栏出现「github-dsh插件市场」,此后每次启动自动加载。
git clone https://github.com/Liaominduyh/dsw-workshop-plugin ~/.dsh/plugins/dsw-workshop-plugin
dsh plugin --profile web add link:~/.dsh/plugins/dsw-workshop-plugin
cordis.patch.yml — bundle 激活补丁(dsh plugin add 后自动加入 profile 的 dsh.profile.bundles)lib/index.js — Host 侧:webServer HTTP 路由 /dsw-workshop/api/*(注册表聚合 / 官方安装 / 订阅管理 / 翻译 / 摘要)lib/client.js — Client 侧:__ModuleLoader__.load bundle(React UI + fetch 桥接)~/.dsh/plugins/dsw-workshop-plugin/data/(subscriptions / summaries / translations / registry)webServer 服务注册 HTTP 路由__ModuleLoader__.load 格式浏览器 bundle,依赖 dsh-client-runtime / dsh-client-ui-slots / reactdsh plugin 依赖),GitHub 数据经 gh CLI / api.github.com 获取FAQs
github-dsh插件市场:双源聚合 2830+ 插件浏览、官方一键安装、自动翻译、git 订阅管理
The npm package dsw-workshop-plugin receives a total of 0 weekly downloads. As such, dsw-workshop-plugin popularity was classified as not popular.
We found that dsw-workshop-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.