Manifest
    by Manifold
    Back to Results
    2.41.5

    Thunder Client

    Lightweight Rest API Client for VS Code

    Programming LanguagesSnippetsTesting
    Rank#695
    Publisher rangavRegistry openvsx2,773,680Last scanned Oct 1, 2026, 05:44 PMRegistryHomepageGitHub
    Created
    6 years ago
    Last commit
    4 months ago
    Latest release
    v2.41.33 weeks ago

    Security Findings

    4

    Hardcoded secrets/API keys2×

    SuspiciousScanner

    Secret Keyword: use s...****

    Secret Keyword: ****

    dist/extension.js

    OWASP-AST04

    Sensitive file access

    SuspiciousScanner

    Access to sensitive file: homedir(),t.slice(1)):t}const m={configDotenv:function(t){const e=r.resolve(process.cwd(),".env");let n="utf8",o=process...

    OWASP-AST03

    Install-lifecycle script shipped

    SuspiciousScanner

    package.json postinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): patch-package

    OWASP-AST02OWASP-AST06