Manifest
    by Manifold
    Back to Results
    67.27.6

    Salesforce Services

    a shared services extension for other extensions to use

    Other
    Rank#-785
    Publisher salesforceRegistry openvsx461,575Last scanned Oct 7, 2026, 06:27 PMRegistryHomepageGitHub
    Created
    9 years ago
    Last commit
    2 days ago
    Latest release
    playwright-vscode-ext-v1.7.17 days ago

    Security Findings

    14

    Hardcoded secrets/API keys5×

    SuspiciousScanner

    Secret Keyword: heade...****

    Secret Keyword: strin...****

    Secret Keyword: numbe...****

    Secret Keyword: ****

    Secret Keyword: profi...****

    dist/web/index.js

    OWASP-AST04

    Hardcoded secrets/API keys4×

    SuspiciousScanner

    Secret Keyword: strin...****

    Secret Keyword: numbe...****

    Secret Keyword: profi...****

    Secret Keyword: heade...****

    dist/index.js

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: newPa...****

    dist/templates/project/angularextapp/_p_/_m_/_w_/_a_/src/app/_f_/authentication/utils/auth-validators.ts

    OWASP-AST04

    Sensitive file access

    SuspiciousScanner

    Access to sensitive file: homedir(),t.SFDX_STATE_FOLDER)}static get SF_DIR(){return A$e.join(S8t.homedir(),t.SF_STATE_FOLDER)}static get DIR(){ret...

    OWASP-AST03

    Unpinned dependencies

    SuspiciousLineage

    1 unpinned: @salesforce/effect-octokit

    Install-lifecycle script shipped

    SuspiciousScanner

    package.json preinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): node ../../scripts/require-root-install.js

    OWASP-AST02OWASP-AST06

    Workflow makes outbound network call

    SuspiciousLineage

    [.github/workflows/categoryApprove.yml] curl https://cursor.com/install