Is "Helm values" on JetBrains Marketplace Safe to Install?

François Staudt · jetbrains · v0.12.0

Ease configuration of values for Helm charts in your IDE The plugin provides several actions to generate JSON schemas for values of Helm charts. These schemas can then...

Risk Assessment

Analyzed
100
out of 100
CRITICAL

285 security findings detected across all analyzers

JetBrains plugin analyzed via plugin.xml configuration and static code analysis

Severity Breakdown

0
Critical
50
High
210
Medium
0
Low
0
Info

Finding Categories

50
Malware Signatures
210
IoC Indicators

YARA Rules Matched

10 rules(50 hits)
postinstall file manipulation postinstall network communication postinstall system command postinstall crypto operations postinstall file download postinstall obfuscation postinstall registry modification postinstall persistence mechanism JavaDropper PM Zip with js

About This Extension

Ease configuration of values for Helm charts in your IDE The plugin provides several actions to generate JSON schemas for values of Helm charts. These schemas can then...

Detailed Findings

75 total

YARA Rule Matches

10 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

IP Addresses
28
Domains
182
Strings
210

All Indicators · 210

Domain
detected Domain: 79.uk

XIOC detected Domain: 79.uk

extracted_from_files

Domain
detected Domain: 2.ci

XIOC detected Domain: 2.ci

extracted_from_files

Domain
detected Domain: f.cn

XIOC detected Domain: f.cn

extracted_from_files

Domain
detected Domain: u.cd

XIOC detected Domain: u.cd

extracted_from_files

Domain
detected Domain: g.il

XIOC detected Domain: g.il

extracted_from_files

Domain
detected Domain: 1.pe

XIOC detected Domain: 1.pe

extracted_from_files

Domain
detected Domain: e.ly

XIOC detected Domain: e.ly

extracted_from_files

Domain
detected Domain: u.mq

XIOC detected Domain: u.mq

extracted_from_files

Domain
detected Domain: ğ.sj

XIOC detected Domain: ğ.sj

extracted_from_files

Domain
detected Domain: i.ug

XIOC detected Domain: i.ug

extracted_from_files

Domain
detected Domain: aq.kp

XIOC detected Domain: aq.kp

extracted_from_files

Domain
detected Domain: v.ai

XIOC detected Domain: v.ai

extracted_from_files

Domain
detected Domain: h.lb

XIOC detected Domain: h.lb

extracted_from_files

Domain
detected Domain: ˬs.ci

XIOC detected Domain: ˬs.ci

extracted_from_files

Domain
detected Domain: l.sg

XIOC detected Domain: l.sg

extracted_from_files

Domain
detected Domain: ŝ.do

XIOC detected Domain: ŝ.do

extracted_from_files

Domain
detected Domain: b.tf

XIOC detected Domain: b.tf

extracted_from_files

Domain
detected Domain: 0.nc

XIOC detected Domain: 0.nc

extracted_from_files

Domain
detected Domain: b.zw

XIOC detected Domain: b.zw

extracted_from_files

Domain
detected Domain: p.re

XIOC detected Domain: p.re

extracted_from_files

Domain
detected Domain: ӊ.cm

XIOC detected Domain: ӊ.cm

extracted_from_files

Domain
detected Domain: c.jp

XIOC detected Domain: c.jp

extracted_from_files

Domain
detected Domain: b.vg

XIOC detected Domain: b.vg

extracted_from_files

Domain
detected Domain: e.ma

XIOC detected Domain: e.ma

extracted_from_files

Domain
detected Domain: i.qa

XIOC detected Domain: i.qa

extracted_from_files

Domain
detected Domain: yc.ua

XIOC detected Domain: yc.ua

extracted_from_files

Domain
detected Domain: 8.az

XIOC detected Domain: 8.az

extracted_from_files

Domain
detected Domain: jx.pt

XIOC detected Domain: jx.pt

extracted_from_files

Domain
detected Domain: l.tn

XIOC detected Domain: l.tn

extracted_from_files

Domain
detected Domain: a.ss

XIOC detected Domain: a.ss

extracted_from_files

Domain
detected Domain: l.ad

XIOC detected Domain: l.ad

extracted_from_files

Domain
detected Domain: ψd.ug

XIOC detected Domain: ψd.ug

extracted_from_files

Domain
detected Domain: h.lr

XIOC detected Domain: h.lr

extracted_from_files

Domain
detected Domain: s.tg

XIOC detected Domain: s.tg

extracted_from_files

Domain
detected Domain: r.ki

XIOC detected Domain: r.ki

extracted_from_files

Domain
detected Domain: l3.to

XIOC detected Domain: l3.to

extracted_from_files

Domain
detected Domain: l.br

XIOC detected Domain: l.br

extracted_from_files

Domain
detected Domain: hjn.ar

XIOC detected Domain: hjn.ar

extracted_from_files

Domain
detected Domain: f.pt

XIOC detected Domain: f.pt

extracted_from_files

Domain
detected Domain: m.vi

XIOC detected Domain: m.vi

extracted_from_files

Domain
detected Domain: l.gr

XIOC detected Domain: l.gr

extracted_from_files

Domain
detected Domain: ĥ.tc

XIOC detected Domain: ĥ.tc

extracted_from_files

Domain
detected Domain: m.gy

XIOC detected Domain: m.gy

extracted_from_files

Domain
detected Domain: җ.ml

XIOC detected Domain: җ.ml

extracted_from_files

Domain
detected Domain: p.gy

XIOC detected Domain: p.gy

extracted_from_files

Domain
detected Domain: c.nl

XIOC detected Domain: c.nl

extracted_from_files

Domain
detected Domain: u.mg

XIOC detected Domain: u.mg

extracted_from_files

Domain
detected Domain: u.uk

XIOC detected Domain: u.uk

extracted_from_files

Domain
detected Domain: 4.mv

XIOC detected Domain: 4.mv

extracted_from_files

Domain
detected Domain: b.yt

XIOC detected Domain: b.yt

extracted_from_files

Domain
detected Domain: 8e.il

XIOC detected Domain: 8e.il

extracted_from_files

Domain
detected Domain: s2ޖqaƻ2.jp

XIOC detected Domain: s2ޖqaƻ2.jp

extracted_from_files

Domain
detected Domain: a.ai

XIOC detected Domain: a.ai

extracted_from_files

IP
detected IP: c::e

XIOC detected IP: c::e

extracted_from_files

Domain
detected Domain: messages.properties

XIOC detected Domain: messages.properties

extracted_from_files

Domain
detected Domain: jm.pr

XIOC detected Domain: jm.pr

extracted_from_files

Domain
detected Domain: fc.co

XIOC detected Domain: fc.co

extracted_from_files

Domain
detected Domain: com.android.tools

XIOC detected Domain: com.android.tools

extracted_from_files

Domain
detected Domain: kotlin-reflect.pro

XIOC detected Domain: kotlin-reflect.pro

extracted_from_files

Domain
detected Domain: 6.dk

XIOC detected Domain: 6.dk

extracted_from_files

Domain
detected Domain: sd.ye

XIOC detected Domain: sd.ye

extracted_from_files

Domain
detected Domain: g.fr

XIOC detected Domain: g.fr

extracted_from_files

Domain
detected Domain: ʌl.br

XIOC detected Domain: ʌl.br

extracted_from_files

Domain
detected Domain: ɥl.cr

XIOC detected Domain: ɥl.cr

extracted_from_files

Domain
detected Domain: j.pg

XIOC detected Domain: j.pg

extracted_from_files

Domain
detected Domain: sd.to

XIOC detected Domain: sd.to

extracted_from_files

Domain
detected Domain: ݦ.ly

XIOC detected Domain: ݦ.ly

extracted_from_files

Domain
detected Domain: cȯ.cc

XIOC detected Domain: cȯ.cc

extracted_from_files

Domain
detected Domain: jf.at

XIOC detected Domain: jf.at

extracted_from_files

Domain
detected Domain: sһ.pw

XIOC detected Domain: sһ.pw

extracted_from_files

Domain
detected Domain: 7c.na

XIOC detected Domain: 7c.na

extracted_from_files

Domain
detected Domain: n.bw

XIOC detected Domain: n.bw

extracted_from_files

Domain
detected Domain: f.wf

XIOC detected Domain: f.wf

extracted_from_files

Domain
detected Domain: o.is

XIOC detected Domain: o.is

extracted_from_files

Domain
detected Domain: ua.pt

XIOC detected Domain: ua.pt

extracted_from_files

Domain
detected Domain: k.il

XIOC detected Domain: k.il

extracted_from_files

Domain
detected Domain: 0ny.sa

XIOC detected Domain: 0ny.sa

extracted_from_files

Domain
detected Domain: k.st

XIOC detected Domain: k.st

extracted_from_files

Domain
detected Domain: ރ.mh

XIOC detected Domain: ރ.mh

extracted_from_files

Domain
detected Domain: x.ad

XIOC detected Domain: x.ad

extracted_from_files

Domain
detected Domain: tɀ.mw

XIOC detected Domain: tɀ.mw

extracted_from_files

Domain
detected Domain: 4.lk

XIOC detected Domain: 4.lk

extracted_from_files

Domain
detected Domain: a.lv

XIOC detected Domain: a.lv

extracted_from_files

Domain
detected Domain: δ.gw

XIOC detected Domain: δ.gw

extracted_from_files

Domain
detected Domain: r.na

XIOC detected Domain: r.na

extracted_from_files

Domain
detected Domain: k.ck

XIOC detected Domain: k.ck

extracted_from_files

Domain
detected Domain: nx7.jp

XIOC detected Domain: nx7.jp

extracted_from_files

Domain
detected Domain: c.gb

XIOC detected Domain: c.gb

extracted_from_files

Domain
detected Domain: du.ax

XIOC detected Domain: du.ax

extracted_from_files

Domain
detected Domain: v.bd

XIOC detected Domain: v.bd

extracted_from_files

Domain
detected Domain: v.kw

XIOC detected Domain: v.kw

extracted_from_files

Domain
detected Domain: x.ki

XIOC detected Domain: x.ki

extracted_from_files

Domain
detected Domain: ҙ.su

XIOC detected Domain: ҙ.su

extracted_from_files

Domain
detected Domain: e.gg

XIOC detected Domain: e.gg

extracted_from_files

Domain
detected Domain: u.by

XIOC detected Domain: u.by

extracted_from_files

Domain
detected Domain: o3.cn

XIOC detected Domain: o3.cn

extracted_from_files

Domain
detected Domain: 4.mz

XIOC detected Domain: 4.mz

extracted_from_files

Domain
detected Domain: 2.hu

XIOC detected Domain: 2.hu

extracted_from_files

Domain
detected Domain: bz.gf

XIOC detected Domain: bz.gf

extracted_from_files

Domain
detected Domain: w.ro

XIOC detected Domain: w.ro

extracted_from_files

Domain
detected Domain: o8.na

XIOC detected Domain: o8.na

extracted_from_files

Domain
detected Domain: k.yt

XIOC detected Domain: k.yt

extracted_from_files

Domain
detected Domain: v.tn

XIOC detected Domain: v.tn

extracted_from_files

Domain
detected Domain: f.mg

XIOC detected Domain: f.mg

extracted_from_files

Domain
detected Domain: v.it

XIOC detected Domain: v.it

extracted_from_files

Domain
detected Domain: 6.ph

XIOC detected Domain: 6.ph

extracted_from_files

Domain
detected Domain: ڱ.sa

XIOC detected Domain: ڱ.sa

extracted_from_files

Domain
detected Domain: հ.gu

XIOC detected Domain: հ.gu

extracted_from_files

Domain
detected Domain: i.mt

XIOC detected Domain: i.mt

extracted_from_files

Domain
detected Domain: i.yt

XIOC detected Domain: i.yt

extracted_from_files

Domain
detected Domain: t.vc

XIOC detected Domain: t.vc

extracted_from_files

Domain
detected Domain: h.gu

XIOC detected Domain: h.gu

extracted_from_files

Domain
detected Domain: a.vc

XIOC detected Domain: a.vc

extracted_from_files

Domain
detected Domain: 0.mx

XIOC detected Domain: 0.mx

extracted_from_files

Domain
detected Domain: t.mv

XIOC detected Domain: t.mv

extracted_from_files

Domain
detected Domain: h.sk

XIOC detected Domain: h.sk

extracted_from_files

Domain
detected Domain: l.bw

XIOC detected Domain: l.bw

extracted_from_files

Domain
detected Domain: ڄ.gi

XIOC detected Domain: ڄ.gi

extracted_from_files

Domain
detected Domain: 2.bj

XIOC detected Domain: 2.bj

extracted_from_files

Domain
detected Domain: 0.vi

XIOC detected Domain: 0.vi

extracted_from_files

Domain
detected Domain: s.se

XIOC detected Domain: s.se

extracted_from_files

Domain
detected Domain: t.do

XIOC detected Domain: t.do

extracted_from_files

Domain
detected Domain: a.ac

XIOC detected Domain: a.ac

extracted_from_files

Domain
detected Domain: u.pr

XIOC detected Domain: u.pr

extracted_from_files

Domain
detected Domain: s.kz

XIOC detected Domain: s.kz

extracted_from_files

Domain
detected Domain: щ.nz

XIOC detected Domain: щ.nz

extracted_from_files

Domain
detected Domain: t.tz

XIOC detected Domain: t.tz

extracted_from_files

Domain
detected Domain: helmvaluesbundle.properties

XIOC detected Domain: helmvaluesbundle.properties

extracted_from_files

Domain
detected Domain: d.ls

XIOC detected Domain: d.ls

extracted_from_files

Domain
detected Domain: 1e.it

XIOC detected Domain: 1e.it

extracted_from_files

Domain
detected Domain: yyl.am

XIOC detected Domain: yyl.am

extracted_from_files

Domain
detected Domain: e.bn

XIOC detected Domain: e.bn

extracted_from_files

Domain
detected Domain: zryg.ar

XIOC detected Domain: zryg.ar

extracted_from_files

Domain
detected Domain: 2ڊc.nz

XIOC detected Domain: 2ڊc.nz

extracted_from_files

Domain
detected Domain: 2.uz

XIOC detected Domain: 2.uz

extracted_from_files

Domain
detected Domain: e.mv

XIOC detected Domain: e.mv

extracted_from_files

Domain
detected Domain: a.ng

XIOC detected Domain: a.ng

extracted_from_files

Domain
detected Domain: a.kn

XIOC detected Domain: a.kn

extracted_from_files

Domain
detected Domain: 8.ar

XIOC detected Domain: 8.ar

extracted_from_files

Domain
detected Domain: n.dj

XIOC detected Domain: n.dj

extracted_from_files

Domain
detected Domain: 5.pe

XIOC detected Domain: 5.pe

extracted_from_files

Domain
detected Domain: y.af

XIOC detected Domain: y.af

extracted_from_files

Domain
detected Domain: e.af

XIOC detected Domain: e.af

extracted_from_files

Domain
detected Domain: ų.bv

XIOC detected Domain: ų.bv

extracted_from_files

Domain
detected Domain: d.eg

XIOC detected Domain: d.eg

extracted_from_files

Domain
detected Domain: z.cl

XIOC detected Domain: z.cl

extracted_from_files

Domain
detected Domain: x.pn

XIOC detected Domain: x.pn

extracted_from_files

Domain
detected Domain: b.cx

XIOC detected Domain: b.cx

extracted_from_files

Domain
detected Domain: a7s.aq

XIOC detected Domain: a7s.aq

extracted_from_files

Domain
detected Domain: 3.ve

XIOC detected Domain: 3.ve

extracted_from_files

Domain
detected Domain: ȥź.ch

XIOC detected Domain: ȥź.ch

extracted_from_files

Domain
detected Domain: v.lb

XIOC detected Domain: v.lb

extracted_from_files

Domain
detected Domain: jm.ad

XIOC detected Domain: jm.ad

extracted_from_files

Domain
detected Domain: z4j.ec

XIOC detected Domain: z4j.ec

extracted_from_files

Domain
detected Domain: xo.ug

XIOC detected Domain: xo.ug

extracted_from_files

Domain
detected Domain: rj.cn

XIOC detected Domain: rj.cn

extracted_from_files

Domain
detected Domain: p.mtn

XIOC detected Domain: p.mtn

extracted_from_files

Domain
detected Domain: i.re

XIOC detected Domain: i.re

extracted_from_files

Domain
detected Domain: w嵼p.ai

XIOC detected Domain: w嵼p.ai

extracted_from_files

Domain
detected Domain: jm.ag

XIOC detected Domain: jm.ag

extracted_from_files

Domain
detected Domain: wc.jp

XIOC detected Domain: wc.jp

extracted_from_files

Domain
detected Domain: q.aw

XIOC detected Domain: q.aw

extracted_from_files

Domain
detected Domain: q.nr

XIOC detected Domain: q.nr

extracted_from_files

Domain
detected Domain: 3.sn

XIOC detected Domain: 3.sn

extracted_from_files

Domain
detected Domain: b.ve

XIOC detected Domain: b.ve

extracted_from_files

Domain
detected Domain: x.id

XIOC detected Domain: x.id

extracted_from_files

Domain
detected Domain: k.us

XIOC detected Domain: k.us

extracted_from_files

IP
detected IP: a::

XIOC detected IP: a::

extracted_from_files

IP
detected IP: 2::

XIOC detected IP: 2::

extracted_from_files

IP
detected IP: ::5

XIOC detected IP: ::5

extracted_from_files

IP
detected IP: ::59

XIOC detected IP: ::59

extracted_from_files

IP
detected IP: ::e

XIOC detected IP: ::e

extracted_from_files

IP
detected IP: 8::

XIOC detected IP: 8::

extracted_from_files

Domain
detected Domain: pom.properties

XIOC detected Domain: pom.properties

extracted_from_files

IP
detected IP: b::

XIOC detected IP: b::

extracted_from_files

IP
detected IP: 1::

XIOC detected IP: 1::

extracted_from_files

IP
detected IP: ::a

XIOC detected IP: ::a

extracted_from_files

IP
detected IP: ::f

XIOC detected IP: ::f

extracted_from_files

IP
detected IP: ::eb

XIOC detected IP: ::eb

extracted_from_files

IP
detected IP: ::3

XIOC detected IP: ::3

extracted_from_files

IP
detected IP: e::

XIOC detected IP: e::

extracted_from_files

IP
detected IP: 5::

XIOC detected IP: 5::

extracted_from_files

IP
detected IP: d::

XIOC detected IP: d::

extracted_from_files

IP
detected IP: 6::

XIOC detected IP: 6::

extracted_from_files

IP
detected IP: 4::

XIOC detected IP: 4::

extracted_from_files

IP
detected IP: ::8

XIOC detected IP: ::8

extracted_from_files

IP
detected IP: 0::

XIOC detected IP: 0::

extracted_from_files

IP
detected IP: d::d

XIOC detected IP: d::d

extracted_from_files

IP
detected IP: 0::b

XIOC detected IP: 0::b

extracted_from_files

IP
detected IP: 9::

XIOC detected IP: 9::

extracted_from_files

IP
detected IP: ::d

XIOC detected IP: ::d

extracted_from_files

IP
detected IP: ::c

XIOC detected IP: ::c

extracted_from_files

IP
detected IP: ::2

XIOC detected IP: ::2

extracted_from_files

IP
detected IP: f::

XIOC detected IP: f::

extracted_from_files

IP
detected IP: ::81

XIOC detected IP: ::81

extracted_from_files

Domain
detected Domain: ŗ.ss

XIOC detected Domain: ŗ.ss

extracted_from_files

Domain
detected Domain: u.si

XIOC detected Domain: u.si

extracted_from_files

Domain
detected Domain: e.ax

XIOC detected Domain: e.ax

extracted_from_files

Domain
detected Domain: 8.cr

XIOC detected Domain: 8.cr

extracted_from_files

Domain
detected Domain: t.lb

XIOC detected Domain: t.lb

extracted_from_files

Domain
detected Domain: s.su

XIOC detected Domain: s.su

extracted_from_files

Domain
detected Domain: 4.lv

XIOC detected Domain: 4.lv

extracted_from_files

Domain
detected Domain: g.ws

XIOC detected Domain: g.ws

extracted_from_files

Domain
detected Domain: x.sl

XIOC detected Domain: x.sl

extracted_from_files

Domain
detected Domain: j.ad

XIOC detected Domain: j.ad

extracted_from_files

Domain
detected Domain: e햊9.pw

XIOC detected Domain: e햊9.pw

extracted_from_files

Domain
detected Domain: t.sd

XIOC detected Domain: t.sd

extracted_from_files

Domain
detected Domain: ށ.bi

XIOC detected Domain: ށ.bi

extracted_from_files

Domain
detected Domain: h.ge

XIOC detected Domain: h.ge

extracted_from_files

Domain
detected Domain: t.af

XIOC detected Domain: t.af

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Helm values is a jetbrains extension published by François Staudt. Version 0.12.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 285 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 50 finding(s)
  • Medium: 210 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Helm values is published by François Staudt on the jetbrains marketplace. The extension has approximately 106K users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions