DevDb
A zero-config extension that displays your database records right inside VS Code and provides tools and affordances to aid development and debugging.
- Created
- 3 years ago
- Last commit
- 6 days ago
- Latest release
- v4.0.1last week
Security Findings
24Dynamic exec of remote content (VSX)
SuspiciousScannerDownload-and-execute in node_modules/@vscode/sqlite3/build/Release/obj/global_intermediate/sqlite-autoconf-3390400/configure: chmod +x
node_modules/@vscode/sqlite3/build/Release/obj/global_intermediate/sqlite-autoconf-3390400/configure
Dynamic exec of remote content (VSX)
SuspiciousScannerDownload-and-execute in node_modules/@vscode/sqlite3/build/Release/obj/global_intermediate/sqlite-autoconf-3390400/tea/configure: chmod +x
node_modules/@vscode/sqlite3/build/Release/obj/global_intermediate/sqlite-autoconf-3390400/tea/configure
Dynamic exec of remote content (VSX)
SuspiciousScannerDownload-and-execute in node_modules/@vscode/sqlite3/build/Release/obj/global_intermediate/sqlite-autoconf-3390400/aclocal.m4: chmod +x
node_modules/@vscode/sqlite3/build/Release/obj/global_intermediate/sqlite-autoconf-3390400/aclocal.m4
Hardcoded secrets/API keys11×
SuspiciousScannerSecret Keyword: heade...****
Secret Keyword: strin...****
Secret Keyword: ER_PA...****
Secret Keyword: ER_UN...****
Secret Keyword: EE_UN...****
Secret Keyword: ER_CL...****
Secret Keyword: ER_RE...****
Private Key: BEGIN...****
Private Key: PuTTY...****
Secret Keyword: ER_FK...****
Secret Keyword: funct...****
dist/extension.js
Hardcoded secrets/API keys
SuspiciousScannerSecret Keyword: ****
node_modules/@vscode/sqlite3/build/Release/obj/global_intermediate/sqlite-autoconf-3390400/configure
Hardcoded secrets/API keys3×
SuspiciousScannerSecret Keyword: Enter...****
Secret Keyword: Requi...****
Basic Auth Credentials: ****
ui-shell/dist/assets/index-rkSZjrLD.js
Hardcoded secrets/API keys
SuspiciousScannerSecret Keyword: ****
node_modules/@vscode/sqlite3/build/Release/obj/global_intermediate/sqlite-autoconf-3390400/tea/configure
Sensitive file access4×
SuspiciousScannerAccess to sensitive file: homedir(),t.slice(1)):t}function gZs(t){let e=Kle(process.env.DOTENV_CONFIG_DEBUG||t&&t.debug),r=Kle(process.env.DOTENV_...
Access to sensitive file: ~/.ssh
Access to sensitive file: ~/.aws
Access to sensitive file: homedir(),"AppData","Local","ddev","ddev.exe"),d$.join(vk.homedir(),"AppData","Roaming","ddev","ddev.exe")];break;case"d...
Install-lifecycle script shipped
SuspiciousScannerpackage.json postinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): node scripts/sync-bun-lockfile.js