← 返回扫描报告总表 · ← dshlib 图书馆

扫描报告 · dsh-diagram

认证等级L1
DIDdid:cha2a:package:dsh-diagram
身份锚点hanzhangzzz/dsh-diagram · npm 官方声明
来源npm
插件版本—
安装dsh plugin add dsh-diagram
扫描日期2026-08-16（4 天前）
扫描层级静态扫描（自研规则 + GuardDog 复核 + OSV 依赖）
扫描器版本dshlib-scan v0.1 · GuardDog 3.2.0 · OSV.dev

自研扫描：⚠️ 待审 · GuardDog 复核：⚠️ 待审 · OSV 依赖：未扫描

语义：扫描是提示信号，非安全审查。✅ 通过=无命中；⚠️ 待审=有命中需人工判断；❌ 失败=无法扫描。人工确认恶意→下架。本页全部内容由 dshlib 数据库派生（验证报告 可核对证据）。认证等级与依赖漏洞正交：L4 认证覆盖插件包内容/来源/生态，不覆盖依赖安全（见收录与验证标准）。结论有有效期：插件或运行时更新后，本页结论可能过期（>30 天将标注待复核）。本库能力与边界：披露页。

1. 自研扫描（dshlib-scan）

硬编码密钥（19 处）

文件行命中
package/lib/editor/assets/blockDiagram-VBNYF7ZC-NTXyOss3.js3token: "+P);switch(H[0]){case 1:x.push(P),E.push(O.yytext),o.push(O.yylloc),x.pu
package/lib/editor/assets/c4Diagram-5PPSVZJV-CJeQdCBg.js3token: "+I);switch(N[0]){case 1:E.push(I),R.push(D.yytext),h.push(D.yylloc),E.pu
package/lib/editor/assets/chunk-5RXB4S5H-HnPGSNSC.js3token: "+A);switch(R[0]){case 1:r.push(A),E.push(b.yytext),i.push(b.yylloc),r.pu
package/lib/editor/assets/chunk-GF5L2VYU-DDDAdeeF.js3token: "+B);switch(L[0]){case 1:p.push(B),C.push(D.yytext),e.push(D.yylloc),p.pu
package/lib/editor/assets/erDiagram-JOGREHBK-C3oTC5Sx.js3token: "+g);switch(k[0]){case 1:o.push(g),p.push(_.yytext),t.push(_.yylloc),o.pu
package/lib/editor/assets/flowDiagram-UKHOOZJN-CCc2TpOr.js11token: "+K);switch(Q[0]){case 1:p.push(K),y.push(M.yytext),t.push(M.yylloc),p.pu
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js3token: "+A);switch(Z[0]){case 1:b.push(A),I.push(H.yytext),o.push(H.yylloc),b.pu
package/lib/editor/assets/ishikawaDiagram-WSZJBQD7-oTIusKre.js3token: "+M);switch(N[0]){case 1:i.push(M),f.push(b.yytext),r.push(b.yylloc),i.pu
package/lib/editor/assets/journeyDiagram-NVQOT4AX-DjQ-5ynr.js3token: "+b);switch(T[0]){case 1:l.push(b),d.push(_.yytext),c.push(_.yylloc),l.pu
package/lib/editor/assets/kanban-definition-27J2QSJJ-Di0JlPEN.js3token: "+E);switch(x[0]){case 1:r.push(E),u.push(b.yytext),t.push(b.yylloc),r.pu
package/lib/editor/assets/mindmap-definition-FAOFIHXS-CwSUsh5f.js3token: "+b);switch(S[0]){case 1:o.push(b),p.push(y.yytext),r.push(y.yylloc),o.pu
package/lib/editor/assets/quadrantDiagram-CIZ2JOQS-BazW1WcF.js3token: "+B);switch(W[0]){case 1:u.push(B),A.push(D.yytext),e.push(D.yylloc),u.pu
package/lib/editor/assets/requirementDiagram-LRYGKXZP-Csc3QO9E.js3token: "+b);switch(N[0]){case 1:c.push(b),m.push(y.yytext),t.push(y.yylloc),c.pu
package/lib/editor/assets/sankeyDiagram-W5VNT64P-CXZaOfyX.js3token: "+w);switch(E[0]){case 1:h.push(w),_.push(S.yytext),d.push(S.yylloc),h.pu
package/lib/editor/assets/sequenceDiagram-SI44F4Z6-C4jP8BtK.js3token: "+rt);switch(ct[0]){case 1:P.push(rt),z.push(J.yytext),c.push(J.yylloc),P
package/lib/editor/assets/subset-shared.chunk-Dw5qwg8P.js22AKIASAFKAKMARDWCSICI
package/lib/editor/assets/timeline-definition-Z64GVDOM-gVkk2PsU.js3token: "+_);switch(T[0]){case 1:l.push(_),x.push(w.yytext),u.push(w.yylloc),l.pu
package/lib/editor/assets/vennDiagram-T6HMQDX7-BVNX-az_.js9token: "+z);switch(j[0]){case 1:v.push(z),x.push(T.yytext),d.push(T.yylloc),v.pu
package/lib/editor/assets/xychartDiagram-ELKLHX3M-CfznYfOq.js3token: "+M);switch(O[0]){case 1:g.push(M),w.push(D.yytext),o.push(D.yylloc),g.pu

越权能力（154 处）

文件行命中
package/lib/editor/assets/blockDiagram-VBNYF7ZC-NTXyOss3.js6exec(
package/lib/editor/assets/chunk-5RXB4S5H-HnPGSNSC.js6exec(
package/lib/editor/assets/chunk-GF5L2VYU-DDDAdeeF.js6exec(
package/lib/editor/assets/chunk-GF5L2VYU-DDDAdeeF.js6exec(
package/lib/editor/assets/chunk-GF5L2VYU-DDDAdeeF.js6exec(
package/lib/editor/assets/chunk-GF5L2VYU-DDDAdeeF.js6exec(
package/lib/editor/assets/chunk-GF5L2VYU-DDDAdeeF.js6exec(
package/lib/editor/assets/chunk-GF5L2VYU-DDDAdeeF.js6exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js46exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js46exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js46exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js46exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js67exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js67exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js90exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js90exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js90exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js90exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js147exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js150exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js151exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js151exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js151exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js151exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js151exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js151exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js151exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js160exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js160exec(
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js176exec(
package/lib/editor/assets/cytoscape.esm-CNiYdHpY.js4exec(
package/lib/editor/assets/cytoscape.esm-CNiYdHpY.js4exec(
package/lib/editor/assets/cytoscape.esm-CNiYdHpY.js8exec(
package/lib/editor/assets/cytoscape.esm-CNiYdHpY.js8exec(
package/lib/editor/assets/cytoscape.esm-CNiYdHpY.js14exec(
package/lib/editor/assets/cytoscape.esm-CNiYdHpY.js14exec(
package/lib/editor/assets/cytoscape.esm-CNiYdHpY.js14exec(
package/lib/editor/assets/defaultLocale-DX6XiGOO.js1exec(
package/lib/editor/assets/diagram-7IWD3JNH-DupzqsM9.js1exec(
package/lib/editor/assets/diagram-7IWD3JNH-DupzqsM9.js2exec(
package/lib/editor/assets/diagram-Q27KOJAE-DvqjtFDv.js1exec(
package/lib/editor/assets/erDiagram-JOGREHBK-C3oTC5Sx.js6exec(
package/lib/editor/assets/flowDiagram-UKHOOZJN-CCc2TpOr.js9exec(
package/lib/editor/assets/flowDiagram-UKHOOZJN-CCc2TpOr.js9exec(
package/lib/editor/assets/flowDiagram-UKHOOZJN-CCc2TpOr.js9exec(
package/lib/editor/assets/flowDiagram-UKHOOZJN-CCc2TpOr.js9exec(
package/lib/editor/assets/flowDiagram-UKHOOZJN-CCc2TpOr.js9exec(
package/lib/editor/assets/flowDiagram-UKHOOZJN-CCc2TpOr.js9exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js1exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js6exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js6exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js6exec(
package/lib/editor/assets/ganttDiagram-PKOTCBZU-Ckz0-lD0.js6exec(
package/lib/editor/assets/graph-DOmOIIwC.js1exec(
package/lib/editor/assets/index-CNyeail5.js141exec(
package/lib/editor/assets/index-CNyeail5.js141exec(
package/lib/editor/assets/index-CNyeail5.js141exec(
package/lib/editor/assets/index-CNyeail5.js141exec(
package/lib/editor/assets/index-CNyeail5.js141exec(
package/lib/editor/assets/index-CNyeail5.js141exec(
package/lib/editor/assets/index-CNyeail5.js141exec(
package/lib/editor/assets/index-CNyeail5.js141exec(
package/lib/editor/assets/index-CNyeail5.js141exec(
package/lib/editor/assets/index-CNyeail5.js143exec(
package/lib/editor/assets/index-CNyeail5.js147exec(
package/lib/editor/assets/index-CNyeail5.js147exec(
package/lib/editor/assets/index-CNyeail5.js147exec(
package/lib/editor/assets/index-CNyeail5.js147exec(
package/lib/editor/assets/index-CNyeail5.js149exec(
package/lib/editor/assets/index-CNyeail5.js167exec(
package/lib/editor/assets/index-CNyeail5.js168exec(
package/lib/editor/assets/index-CNyeail5.js177exec(
package/lib/editor/assets/index-CNyeail5.js177exec(
package/lib/editor/assets/index-CNyeail5.js180exec(
package/lib/editor/assets/index-CNyeail5.js180exec(
package/lib/editor/assets/index-CNyeail5.js181exec(
package/lib/editor/assets/index-CNyeail5.js181exec(
package/lib/editor/assets/index-CNyeail5.js181exec(
package/lib/editor/assets/index-CNyeail5.js182exec(
package/lib/editor/assets/index-CNyeail5.js193exec(
package/lib/editor/assets/index-CNyeail5.js193exec(
package/lib/editor/assets/index-CNyeail5.js200exec(
package/lib/editor/assets/index-CNyeail5.js200exec(
package/lib/editor/assets/index-CNyeail5.js200exec(
package/lib/editor/assets/index-CNyeail5.js200exec(
package/lib/editor/assets/index-CNyeail5.js201exec(
package/lib/editor/assets/index-CNyeail5.js201exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js202exec(
package/lib/editor/assets/index-CNyeail5.js216exec(
package/lib/editor/assets/index-CNyeail5.js216exec(
package/lib/editor/assets/index-CNyeail5.js216exec(
package/lib/editor/assets/index-CNyeail5.js246exec(
package/lib/editor/assets/index-CNyeail5.js255exec(
package/lib/editor/assets/index-CNyeail5.js255exec(
package/lib/editor/assets/index-CNyeail5.js255exec(
package/lib/editor/assets/index-CNyeail5.js255exec(
package/lib/editor/assets/index-CNyeail5.js255exec(
package/lib/editor/assets/katex-HP8lGamR.js1exec(
package/lib/editor/assets/katex-HP8lGamR.js252exec(
package/lib/editor/assets/katex-HP8lGamR.js255exec(
package/lib/editor/assets/katex-HP8lGamR.js256exec(
package/lib/editor/assets/katex-HP8lGamR.js256exec(
package/lib/editor/assets/katex-HP8lGamR.js257exec(
package/lib/editor/assets/map-DxJ2ADlA.js1exec(
package/lib/editor/assets/percentages-BXMCSKIN-Cc4FkCAJ.js35exec(
package/lib/editor/assets/percentages-BXMCSKIN-Cc4FkCAJ.js38exec(
package/lib/editor/assets/percentages-BXMCSKIN-Cc4FkCAJ.js114exec(
package/lib/editor/assets/requirementDiagram-LRYGKXZP-Csc3QO9E.js6exec(
package/lib/editor/assets/sequenceDiagram-SI44F4Z6-C4jP8BtK.js10exec(
package/lib/editor/assets/sequenceDiagram-SI44F4Z6-C4jP8BtK.js10exec(
package/lib/editor/assets/sequenceDiagram-SI44F4Z6-C4jP8BtK.js10exec(
package/lib/editor/assets/swimlanes-SLNWSIFB-DQIDj3c9.js2exec(
package/lib/editor/assets/wardleyDiagram-T6FBY63Y-D4lt49Jx.js1exec(

危险命令（2 处）

文件行命中
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js35shutdown
package/lib/editor/assets/subset-shared.chunk-Dw5qwg8P.js22shutdown

数据外传（1 处）

文件行命中
package/lib/editor/assets/cynefin-VYW2F7L2-CGQaIxlM.js5token=new a(l)}cancel(){}dispose(){}},o=class{static{i(this,"SharedArrayReceiver

2. 第三方复核（GuardDog 3.2.0）

,exitZenMode:"Έξοδος από την λειτουργία Zen",cancel:"Ακύρωση",clear:"Καθαρισμός",remove:"Κατάργηση",emb...



────────────────────────────────────────
Assessment:  High risk  (7.2/10)
2 risks detected

3. 依赖漏洞（OSV.dev）

未查询。