Manifest
    by Manifold
    Back to Results
    1.7.456

    Bandit Stealth

    Free, local-first coding agent for VS Code — run Ollama models (Gemma, Qwen, Devstral) with tool use, diff approvals, and voice. Optional Bandit cloud.

    AIChatProgramming LanguagesMachine LearningOther
    Rank#604
    Publisher BurtsonLabsRegistry openvsx130,446Last scanned Nov 3, 2026, 06:31 PMRegistryHomepageGitHub
    Created
    5 months ago
    Last commit
    2 weeks ago
    Latest release
    v1.7.4552 weeks ago

    Security Findings

    4

    Suspicious URL TLD

    SuspiciousScanner

    URL with suspicious TLD .xyz: https://api.together.xyz/v1

    OWASP-AST02

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Download-and-execute in out/extension.js: curl -sSf https://rye-up.com/get | bash

    out/extension.js

    OWASP-AST06

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: bandi...****

    out/extension.js

    OWASP-AST04

    Workflow makes outbound network call

    SuspiciousLineage

    [.github/workflows/integration.yaml] curl -sS -X POST http://localhost:11434/api/pull