- Created
- 6 years ago
- Last commit
- last week
- Latest release
- v26.8.2last month
Security Findings
16Package registry name mismatch
SuspiciousLineagenpm name 'ansible' != repo 'vscode-ansible'
Dynamic exec of remote content (VSX)
SuspiciousScannerFetched content reaches a dynamic exec sink in dist/extension/extension.js: axios
dist/extension/extension.js
Dynamic exec of remote content (VSX)
SuspiciousScannerFetched content reaches a dynamic exec sink in dist/extension/extension.js.map: axios
dist/extension/extension.js.map
Hardcoded secrets/API keys6×
SuspiciousScannerSecret Keyword: strin...****
Secret Keyword: API_K...****
Secret Keyword: x-goo...****
Secret Keyword: light...****
Private Key: BEGIN...****
Secret Keyword: Clien...****
dist/extension/extension.js
Hardcoded secrets/API keys4×
SuspiciousScannerPrivate Key: BEGIN...****
Secret Keyword: GEMIN...****
Secret Keyword: API_K...****
Secret Keyword: x-goo...****
dist/extension/extension.js.map
Hardcoded secrets/API keys
SuspiciousScannerSecret Keyword: Enter...****
dist/assets/nora-dGK6L-pQ.js
Unpinned dependencies
SuspiciousLineage2 unpinned: @ansible/ansible-language-server, @ansible/ansible-mcp-server
Workflow makes outbound network call
SuspiciousLineage[.github/workflows/ci.yaml] curl -fsSL https://mise.run