Manifest
    by Manifold
    Back to Results
    1.16.4

    SFTP

    SFTP/FTP sync

    Other
    Rank#0
    Publisher NatizyskunkRegistry openvsx151,390Last scanned Oct 30, 2026, 08:23 PMRegistryHomepageGitHub
    Created
    5 years ago
    Last commit
    3 days ago
    Latest release
    v1.16.43 days ago

    Security Findings

    7

    Author changed between releases

    SuspiciousLineage

    Author changed from 'Natizyskunk <natan.fourie@hotmail.fr> (https://github.com/Natizyskunk)' to 'Natizyskunk (https://github.com/Natizyskunk)' between v1.16.3 and v1.16.4

    Package registry name mismatch

    SuspiciousLineage

    npm name 'sftp' != repo 'vscode-sftp'

    Hardcoded secrets/API keys2×

    SuspiciousScanner

    Secret Keyword: ****

    Secret Keyword: passw...****

    node_modules/ssh2/README.md

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Private Key: PuTTY...****

    node_modules/ssh2/lib/protocol/keyParser.js

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Private Key: BEGIN...****

    node_modules/ssh2/lib/keygen.js

    OWASP-AST04

    Sensitive file access

    SuspiciousScanner

    Access to sensitive file: ~/.ssh

    OWASP-AST03