Rank#407
Publisher databricksRegistry openvsx219,028Last scanned Oct 12, 2026, 06:22 PMRegistryHomepageGitHub
- Created
- 4 years ago
- Last commit
- 4 days ago
- Latest release
- release-v2.20.02 weeks ago
Security Findings
5Dynamic exec of remote content (VSX)
SuspiciousScannerDownload-and-execute in out/extension.js: irm ${UV_INSTALL_SCRIPT_WINDOWS_URL} | iex
out/extension.js
Hardcoded secrets/API keys3×
SuspiciousScannerSecret Keyword: Clien...****
Secret Keyword: strin...****
Secret Keyword: apike...****
out/extension.js
Transitive delivery to an unrelated extension
SuspiciousScannerPulls unrelated extension(s) via extensionPack/Dependencies (payload lives in the target): redhat.vscode-yaml