twinny - AI Code Completion and Chat
Locally hosted AI code completion plugin for vscode
- Created
- 3 years ago
- Last commit
- last week
- Latest release
- v4.0.20last week
Security Findings
19Prompt injection prose (VSX)
SuspiciousScannerHTML comment hides instruction: ')?\\s*(\\.\\.\\.|…)/;\nvar locateSnippet = (fileLines, snippet) => {\n const wanted = snippet.filter((line2) => line2.trim() '
Hardcoded C2 infrastructure7×
SuspiciousScannerHardcoded public IP address: 142.93.90.113
Hardcoded public IP address: 138.68.147.8
Hardcoded public IP address: 134.209.28.98
Hardcoded public IP address: 167.99.142.185
Hardcoded public IP address: 35.233.47.252
Hardcoded public IP address: 150.136.142.116
Hardcoded public IP address: 88.99.3.86
Hardcoded secrets/API keys4×
SuspiciousScannerSecret Keyword: strin...****
Secret Keyword: AWS_S...****
Secret Keyword: My AP...****
Secret Keyword: twinn...****
out/index.js
Suspicious outbound hosts6×
SuspiciousScannerOutbound URLs to non-allowlisted host(s): [fd00:ec2::254], a.co, api.ai21.com, api.perplexity.ai, dom.spec.whatwg.org, encoding.spec.whatwg.org, feross.org, fetch.spec.whatwg.org
Outbound URLs to non-allowlisted host(s): android.googlesource.com
Outbound URLs to non-allowlisted host(s): sodipodi.sourceforge.net, web.dev, www.inkscape.org
Outbound URLs to non-allowlisted host(s): atomiks.github.io, caml.inria.fr, code.kx.com, commonmark.org, doc.rust-lang.org, docs.couchbase.com, docs.factorcode.org, docs.julialang.org
Outbound URLs to non-allowlisted host(s): bayes.dk, creativecommons.org, dom.spec.whatwg.org, html.spec.whatwg.org, infra.spec.whatwg.org, mafinto.sh, software.intel.com, url.spec.whatwg.org
Outbound URLs to non-allowlisted host(s): android.googlesource.com, creativecommons.org, download.libsodium.org, encoding.spec.whatwg.org, eprint.iacr.org