Manifest
    by Manifold
    Back to Results
    67.25.6

    Salesforce Services

    a shared services extension for other extensions to use

    Other
    Rank#-985
    Publisher salesforceRegistry openvsx455,973Last scanned Sep 30, 2026, 05:57 PMRegistryHomepageGitHub
    Created
    9 years ago
    Last commit
    5 days ago
    Latest release
    v67.20.02 weeks ago

    Security Findings

    13

    pull_request_target with secrets

    MaliciousLineage

    [.github/workflows/docOnlyAutoMerge.yml] pull_request_target with secrets

    Hardcoded secrets/API keys4×

    SuspiciousScanner

    Secret Keyword: strin...****

    Secret Keyword: numbe...****

    Secret Keyword: profi...****

    Secret Keyword: heade...****

    dist/index.js

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: newPa...****

    dist/templates/project/angularextapp/_p_/_m_/_w_/_a_/src/app/_f_/authentication/utils/auth-validators.ts

    OWASP-AST04

    Hardcoded secrets/API keys5×

    SuspiciousScanner

    Secret Keyword: numbe...****

    Secret Keyword: ****

    Secret Keyword: profi...****

    Secret Keyword: heade...****

    Secret Keyword: strin...****

    dist/web/index.js

    OWASP-AST04

    Sensitive file access

    SuspiciousScanner

    Access to sensitive file: homedir(),t.SFDX_STATE_FOLDER)}static get SF_DIR(){return $7e.join(j4t.homedir(),t.SF_STATE_FOLDER)}static get DIR(){ret...

    OWASP-AST03

    Install-lifecycle script shipped

    SuspiciousScanner

    package.json preinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): node ../../scripts/require-root-install.js

    OWASP-AST02OWASP-AST06