Manifest
    by Manifold
    Back to Results
    3.0.13

    Code for IBM i

    Maintain your RPGLE, CL, COBOL, C/CPP on IBM i right from Visual Studio Code.

    Other
    Rank#-496
    Publisher halcyontechltdRegistry openvsx141,671Last scanned Sep 14, 2026, 09:05 PMRegistryHomepageGitHub
    Created
    6 years ago
    Last commit
    last week
    Latest release
    3.0.133 weeks ago

    Security Findings

    18

    Unicode smuggling (VSX)

    SuspiciousScanner

    Dangerous keyword(s) hidden via zero-width/homoglyph obfuscation: System

    OWASP-AST01OWASP-AST04

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Download-and-execute in dist/extension.js: chmod +x

    dist/extension.js

    OWASP-AST06

    Hardcoded secrets/API keys4×

    SuspiciousScanner

    Private Key: BEGIN...****

    Private Key: PuTTY...****

    Secret Keyword: autho...****

    Secret Keyword: strin...****

    dist/extension.js

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: Kodeo...****

    l10n/bundle.l10n.da.json

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: Passw...****

    l10n/bundle.l10n.de.json

    OWASP-AST04

    Hardcoded secrets/API keys2×

    SuspiciousScanner

    Secret Keyword: Contr...****

    Secret Keyword: Guard...****

    l10n/bundle.l10n.es.json

    OWASP-AST04

    Hardcoded secrets/API keys2×

    SuspiciousScanner

    Secret Keyword: Mot d...****

    Secret Keyword: Sauve...****

    l10n/bundle.l10n.fr.json

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: Passo...****

    l10n/bundle.l10n.no.json

    OWASP-AST04

    Hardcoded secrets/API keys2×

    SuspiciousScanner

    Secret Keyword: ****

    Secret Keyword: Zapis...****

    l10n/bundle.l10n.pl.json

    OWASP-AST04

    Sensitive file access

    SuspiciousScanner

    Access to sensitive file: homedir().toLowerCase())&&(e=i().join("~",e.substring(D().homedir().length))),"win32"===process.platform?e.replaceAll("\...

    OWASP-AST03

    Transitive delivery to an unrelated extension

    SuspiciousScanner

    Pulls unrelated extension(s) via extensionPack/Dependencies (payload lives in the target): barrettotte.ibmi-languages

    OWASP-AST02

    Install-lifecycle script shipped

    SuspiciousScanner

    package.json postinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): npx tsx tools/downloadMapepire

    OWASP-AST02OWASP-AST06