JetBrains Marketplace Verified

Technical Debt Accountant

by jakub-jirak · 328 users
14dbc6bf-7741-5ed3-bc5f-24d0e26798f2 | v2026.7.0
41/ 100
MEDIUM risk
+11 since v2026.6.0
Risk verdict
Review before use

Score-based assessment (medium risk, 41/100). No analyst review available.

Analysis record

Analysed
6 days ago
Version
v2026.7.0
Artifact
SHA256 809…6C9
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

10 detail rows

YARA Rule Matches

5 rules
SeverityRuleHitsFilesMetadata
LOWPM Zip with js 1
technical-debt-accountant/lib/technical-debt-accountant-2026.7.0-searchableOptions.jar
-
LOWpostinstall persistence mechanism 1
technical-debt-accountant/lib/technical-debt-accountant-2026.7.0.jar
-
LOWpostinstall crypto operations 1
technical-debt-accountant/lib/technical-debt-accountant-2026.7.0.jar
-
LOWJavaDropper 1
technical-debt-accountant/lib/technical-debt-accountant-2026.7.0.jar
-
LOWpostinstall obfuscation 2
technical-debt-accountant/lib/error_prone_annotations-2.27.0.jartechnical-debt-accountant/lib/technical-debt-accountant-2026.7.0.jar
-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

13 total
...

Network indicators are queued for lazy loading

Scroll this section into view to load the detailed rows.

Publisher Evidence

Low

jakub-jirak

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

82
Noisy-finding weight
x1.00
Publisher domain
jakubjirak.com
Observed
Store verification signal
Verified publisher
Verified
Extension portfolio
24
Portfolio

12 evidence rows available.

Finding Categories

13
IoC Indicators

YARA Rules Matched

5 rules(6 hits)
PM Zip with js postinstall persistence mechanism postinstall crypto operations JavaDropper postinstall obfuscation

Security Analysis Summary

Security Analysis Overview

Technical Debt Accountant is a JetBrains Marketplace extension published by jakub-jirak. Version 2026.7.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 40.84/100 (MEDIUM risk) based on 23 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 13 finding(s)
  • Low: 6 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Technical Debt Accountant is published by jakub-jirak on the JetBrains Marketplace marketplace. The extension has approximately 328 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

JetBrains version history

Risk trend by version

3 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected
41
Change since first
+7
Change from previous
+11
Versions:
First analyzed version
2026.2.16
May 29, 2026
Risk range
30 to 41
Across analyzed versions
Latest analyzed version
2026.7.0
Jun 11, 2026
Selected version
medium
Version
v2026.7.0
3 months ago
Risk score
41
Findings
23
Change vs previous
+11

Pick any point on the chart to explore that version's code below.

About This Extension

Launch Offer: 20% OFF for a limited time — get started today and save on your first year. Technical Debt Accountant — Quantify Code Debt in Dollars Speak management's...

Frequently Asked Questions