Manifest
    by Manifold
    Back to Results
    1.6.0

    Posit Assistant

    AI assistant for analyzing and understanding data.

    Other
    Rank#-686
    Publisher positRegistry openvsx436,247Last scanned Sep 30, 2026, 06:20 PMRegistry

    Security Findings

    25

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Fetched content reaches a dynamic exec sink in dist/provider-manager/main.js: fetch(

    dist/provider-manager/main.js

    OWASP-AST06

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Fetched content reaches a dynamic exec sink in dist/canvas-client/chunks/chunk-A2WPTK5J.js: fetch(

    dist/canvas-client/chunks/chunk-A2WPTK5J.js

    OWASP-AST06

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Fetched content reaches a dynamic exec sink in dist/client-fallback/main.js: fetch(

    dist/client-fallback/main.js

    OWASP-AST06

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Fetched content reaches a dynamic exec sink in dist/client/chunks/chunk-A2WPTK5J.js: fetch(

    dist/client/chunks/chunk-A2WPTK5J.js

    OWASP-AST06

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Fetched content reaches a dynamic exec sink in dist/plugins/main.js: fetch(

    dist/plugins/main.js

    OWASP-AST06

    Hardcoded secrets/API keys4×

    SuspiciousScanner

    Secret Keyword: OpenC...****

    Secret Keyword: API K...****

    Secret Keyword: Enter...****

    Secret Keyword: Anthr...****

    dist/canvas-client/main.js

    OWASP-AST04

    Hardcoded secrets/API keys2×

    SuspiciousScanner

    Secret Keyword: Get-L...****

    Secret Keyword: OpenC...****

    dist/client-fallback/main.js

    OWASP-AST04

    Hardcoded secrets/API keys3×

    SuspiciousScanner

    Secret Keyword: OpenC...****

    Secret Keyword: API K...****

    Secret Keyword: Get-L...****

    dist/provider-manager/main.js

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: Get-L...****

    dist/client/chunks/chunk-2VYUPI4G.js

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: OpenC...****

    dist/client/main.js

    OWASP-AST04

    Hardcoded secrets/API keys4×

    SuspiciousScanner

    Secret Keyword: Get-L...****

    Secret Keyword: strin...****

    Secret Keyword: lmstu...****

    Secret Keyword: sessi...****

    dist/extension.js

    OWASP-AST04

    Hardcoded secrets/API keys2×

    SuspiciousScanner

    Secret Keyword: Get-L...****

    Secret Keyword: OpenC...****

    dist/plugins/main.js

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: Get-L...****

    dist/canvas-client/chunks/chunk-P76LXTV6.js

    OWASP-AST04

    Sensitive file access

    SuspiciousScanner

    Access to sensitive file: ~/.aws

    OWASP-AST03

    Dangerous security bypass flags

    SuspiciousScanner

    Bypass flag in content: --trust

    OWASP-AST06