Rank#807
Publisher ms-vscodeRegistry openvsx3,127,781Last scanned Sep 24, 2026, 04:50 PMRegistryHomepageGitHub
- Created
- 7 years ago
- Last commit
- last week
- Latest release
- v1.140.0last week
Security Findings
3Package registry name mismatch
SuspiciousLineagenpm name 'js-debug' != repo 'vscode-pwa'
Sensitive file access
SuspiciousScannerAccess to sensitive file: homedir(),t.slice(1)):t}function Qce(t){Kce("Loading env from encrypted .env.vault");let e=Qt._parseVault(t),r=process.e...
Install-lifecycle script shipped
SuspiciousScannerpackage.json postinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): playwright install chromium --with-deps --only-shell