0.18.2

    marimo

    A marimo notebook extension for VS Code.

    Rank#405
    Publisher marimo-teamRegistry openvsx146,862Last scanned Oct 12, 2026, 06:20 PMRegistryHomepageGitHub
    Created
    last year
    Last commit
    5 days ago
    Latest release
    0.18.13 weeks ago

    Security Findings

    4

    pull_request_target with secrets

    MaliciousLineage

    [.github/workflows/cla.yml] pull_request_target with secrets

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Fetched content reaches a dynamic exec sink in dist/chat-ui-dg7zWnXS.mjs: fetch(

    dist/chat-ui-dg7zWnXS.mjs

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Fetched content reaches a dynamic exec sink in dist/katex-wlUmqnOd.mjs: fetch(

    dist/katex-wlUmqnOd.mjs

    Dangerous security bypass flags

    SuspiciousScanner

    Bypass flag in content: --trust