Roo Code
A whole dev team of AI agents in your editor.
- Created
- 2 years ago
- Last commit
- 5 months ago
- Latest release
- v3.54.05 months ago
Security Findings
91Prompt injection prose (VSX)
SuspiciousScannerHTML comment hides instruction: '"),f=d+l.length,g=n.charAt(f);if(m){var b=r$(l);return r<0?(o.push(b),o):((u=i[r]).children.push(b),o)}if(p&&(r++,(t=r$('
Dynamic exec of remote content (VSX)
SuspiciousScannerFetched content reaches a dynamic exec sink in webview-ui/build/assets/mermaid-bundle.js: fetch(
webview-ui/build/assets/mermaid-bundle.js
Dynamic exec of remote content (VSX)
SuspiciousScannerFetched content reaches a dynamic exec sink in webview-ui/build/assets/index.js.map: Axios
webview-ui/build/assets/index.js.map
Dynamic exec of remote content (VSX)
SuspiciousScannerFetched content reaches a dynamic exec sink in dist/extension.js.map: axios
dist/extension.js.map
Hardcoded secrets/API keys11×
SuspiciousScannerSecret Keyword: DOTEN...****
Secret Keyword: ****
Secret Keyword: roo-c...****
Secret Keyword: not-p...****
Secret Keyword: strin...****
Secret Keyword: AWS_S...****
Secret Keyword: https...****
Secret Keyword: Clien...****
Secret Keyword: apiKe...****
Secret Keyword: API_K...****
Secret Keyword: boole...****
dist/extension.js
Hardcoded secrets/API keys2×
SuspiciousScannerSecret Keyword: Ungül...****
Secret Keyword: API-S...****
dist/i18n/locales/de/embeddings.json
Hardcoded secrets/API keys
SuspiciousScannerSecret Keyword: Las c...****
dist/i18n/locales/es/common.json
Hardcoded secrets/API keys2×
SuspiciousScannerSecret Keyword: Clave...****
Secret Keyword: Se re...****
dist/i18n/locales/es/embeddings.json
Hardcoded secrets/API keys2×
SuspiciousScannerSecret Keyword: Clé A...****
Secret Keyword: Une c...****
dist/i18n/locales/fr/embeddings.json
Hardcoded secrets/API keys
SuspiciousScannerSecret Keyword: इस एम...****
dist/i18n/locales/hi/embeddings.json
Hardcoded secrets/API keys
SuspiciousScannerSecret Keyword: OpenR...****
dist/i18n/locales/hi/tools.json
Hardcoded secrets/API keys
SuspiciousScannerSecret Keyword: Kunci...****
dist/i18n/locales/id/embeddings.json
Hardcoded secrets/API keys2×
SuspiciousScannerSecret Keyword: Chiav...****
Secret Keyword: È ric...****
dist/i18n/locales/it/embeddings.json
Hardcoded secrets/API keys
SuspiciousScannerSecret Keyword: La ch...****
dist/i18n/locales/it/tools.json
Hardcoded secrets/API keys2×
SuspiciousScannerSecret Keyword: 잘못된 A...****
Secret Keyword: 이 임베더...****
dist/i18n/locales/ko/embeddings.json
Hardcoded secrets/API keys
SuspiciousScannerSecret Keyword: Ongel...****
dist/i18n/locales/nl/embeddings.json
Hardcoded secrets/API keys2×
SuspiciousScannerSecret Keyword: Niepr...****
Secret Keyword: Klucz...****
dist/i18n/locales/pl/embeddings.json
Hardcoded secrets/API keys
SuspiciousScannerSecret Keyword: Chave...****
dist/i18n/locales/pt-BR/embeddings.json
Hardcoded secrets/API keys2×
SuspiciousScannerSecret Keyword: Невер...****
Secret Keyword: Для э...****
dist/i18n/locales/ru/embeddings.json
Hardcoded secrets/API keys
SuspiciousScannerSecret Keyword: Для г...****
dist/i18n/locales/ru/tools.json
Hardcoded secrets/API keys2×
SuspiciousScannerSecret Keyword: Geçer...****
Secret Keyword: Bu gö...****
dist/i18n/locales/tr/embeddings.json
Hardcoded secrets/API keys2×
SuspiciousScannerSecret Keyword: Khóa ...****
Secret Keyword: Cần c...****
dist/i18n/locales/vi/embeddings.json
Hardcoded secrets/API keys
SuspiciousScannerSecret Keyword: Yêu c...****
dist/i18n/locales/vi/tools.json
Hardcoded secrets/API keys
SuspiciousScannerSecret Keyword: API 密...****
dist/i18n/locales/zh-CN/embeddings.json
Hardcoded secrets/API keys
SuspiciousScannerSecret Keyword: API 金...****
dist/i18n/locales/zh-TW/common.json
Hardcoded secrets/API keys39×
SuspiciousScannerSecret Keyword: Je mo...****
Secret Keyword: Bạn p...****
Secret Keyword: API 密...****
Secret Keyword: API 金...****
Secret Keyword: folde...****
Secret Keyword: ****
Secret Keyword: crede...****
Secret Keyword: Clau ...****
Secret Keyword: Obté ...****
Secret Keyword: API-S...****
Secret Keyword: Unbou...****
Secret Keyword: OpenR...****
Secret Keyword: API K...****
Secret Keyword: Ollam...****
Secret Keyword: Clave...****
Secret Keyword: Se re...****
Secret Keyword: Clé A...****
Secret Keyword: API क...****
Secret Keyword: OpenA...****
Secret Keyword: आपको ...****
Secret Keyword: Kunci...****
Secret Keyword: Kamu ...****
Secret Keyword: Chiav...****
Secret Keyword: Inser...****
Secret Keyword: APIキー...****
Secret Keyword: API 키...****
Secret Keyword: API-s...****
Secret Keyword: Klucz...****
Secret Keyword: Musis...****
Secret Keyword: Chave...****
Secret Keyword: Você ...****
Secret Keyword: Ключ ...****
Secret Keyword: Получ...****
Secret Keyword: API-к...****
Secret Keyword: Вы до...****
Secret Keyword: API A...****
Secret Keyword: Geçer...****
Secret Keyword: Khóa ...****
Secret Keyword: Cần c...****
webview-ui/build/assets/index.js
Hardcoded secrets/API keys2×
SuspiciousScannerSecret Keyword: folde...****
Secret Keyword: ****
assets/vscode-material-icons/icon-map.json
Sensitive file access3×
SuspiciousScannerAccess to sensitive file: homedir(),t.slice(1)):t}function Vgi(t){!!(t&&t.debug)&&O$("Loading env from encrypted .env.vault");let r=ym._parseVault...
Access to sensitive file: homedir(),t.slice(1)):t}KJt.exports=m1i});var tjt=pe((R5s,ejt)=>{var $Jt=zJt();function g1i(t){let e=[];if(t&&t.path)if(...
Access to sensitive file: ~/.aws
Dangerous security bypass flags2×
SuspiciousScannerBypass flag in content: --no-sandbox
Bypass flag in content: --trust
Unpinned dependencies
SuspiciousLineage1 unpinned: @roo-code/config-typescript