Manifest
    by Manifold
    Back to Results
    1.1.6

    NuGet Package Manager

    Add or remove .NET Core 1.1+ package references to/from your project's .csproj or .fsproj file using Code's Command Palette.

    Other
    Rank#570
    Publisher jmxgrogRegistry openvsx2,043,279Last scanned Sep 5, 2026, 10:40 AMRegistryHomepageGitHub

    Security Findings

    5

    Dormant repo sudden activity

    MaliciousLineage

    Dormant 1593d then new commits

    Publisher cannot be tied to the declared repo

    SuspiciousLineage

    The declared source repository could not be tied to this publisher: the registry namespace does not match the repo owner, the namespace is not verified, and no Marketplace twin corroborates it. Repo lineage is not shown, because it would describe a repository this publisher may not own.

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Fetched content reaches a dynamic exec sink in node_modules/node-fetch/test/test.js: fetch(

    node_modules/node-fetch/test/test.js

    OWASP-AST06

    Sensitive file access

    SuspiciousScanner

    Access to sensitive file: /etc/passwd

    OWASP-AST03

    Install-lifecycle script shipped

    SuspiciousScanner

    package.json postinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): node ./node_modules/vscode/bin/install

    OWASP-AST02OWASP-AST06