Rank#-486
Publisher salesforceRegistry openvsx416,945Last scanned Sep 30, 2026, 05:39 PMRegistryHomepageGitHub
- Created
- 9 years ago
- Last commit
- 5 days ago
- Latest release
- v67.20.02 weeks ago
Security Findings
8pull_request_target with secrets
MaliciousLineage[.github/workflows/docOnlyAutoMerge.yml] pull_request_target with secrets
Hardcoded secrets/API keys2×
SuspiciousScannerSecret Keyword: strin...****
Secret Keyword: numbe...****
dist/index.js
Hardcoded secrets/API keys3×
SuspiciousScannerSecret Keyword: strin...****
Secret Keyword: ****
Secret Keyword: numbe...****
dist/web/index.js
Sensitive file access
SuspiciousScannerAccess to sensitive file: homedir(),e.SFDX_STATE_FOLDER)}static get SF_DIR(){return Vpe.join(ABe.homedir(),e.SF_STATE_FOLDER)}static get DIR(){ret...
Install-lifecycle script shipped
SuspiciousScannerpackage.json preinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): node ../../scripts/require-root-install.js