Rank#1298
- Created
- 10 years ago
- Last commit
- 2 weeks ago
- Latest release
- v5.38.1last month
Security Findings
5Package registry name mismatch
SuspiciousLineagenpm name 'material-icon-theme' != repo 'vscode-material-icon-theme'
pull_request_target with secrets
MaliciousLineage[.github/workflows/icon-review.yml] pull_request_target with secrets
Hardcoded secrets/API keys2×
SuspiciousScannerSecret Keyword: folde...****
Secret Keyword: ****
dist/material-icons.json
Workflow makes outbound network call
SuspiciousLineage[.github/workflows/icon-review.yml] curl --location 'https://freeimage.host/json