Manifest
    by Manifold
    Back to Results
    0.18.1

    marimo

    A marimo notebook extension for VS Code.

    Data ScienceNotebooks
    Rank#404
    Publisher marimo-teamRegistry openvsx135,620Last scanned Sep 23, 2026, 03:36 PMRegistryHomepageGitHub
    Created
    last year
    Last commit
    last week
    Latest release
    0.18.1last week

    Security Findings

    4

    pull_request_target with secrets

    MaliciousLineage

    [.github/workflows/cla.yml] pull_request_target with secrets

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Fetched content reaches a dynamic exec sink in dist/chat-ui-Cmd5dhn9.mjs: fetch(

    dist/chat-ui-Cmd5dhn9.mjs

    OWASP-AST06

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Fetched content reaches a dynamic exec sink in dist/katex-DQUlllPT.mjs: fetch(

    dist/katex-DQUlllPT.mjs

    OWASP-AST06

    Dangerous security bypass flags

    SuspiciousScanner

    Bypass flag in content: --trust

    OWASP-AST06