Biu has a security risk score of 100/100 (CRITICAL risk). Our security analysis detected 152 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Biu?

Based on our automated security analysis, Biu presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "Biu" on JetBrains Marketplace Safe to Install?

Name: Biu
Availability: InStock
Rating: 4.41 (0 reviews)
Author: wu aven

wu aven · jetbrains · v0.2.0

An IntelliJ IDEA plugin which makes PNG compression much more convenient. It's powered by the well known pngquant library and API from tinypng.

Risk Assessment

Analyzed

100

out of 100

CRITICAL

152 security findings detected across all analyzers

JetBrains plugin analyzed via plugin.xml configuration and static code analysis

Severity Breakdown

Critical

High

Medium

Low

Info

Finding Categories

Malware Signatures

Obfuscation

IoC Indicators

YARA Rules Matched

6 rules(11 hits)

postinstall network communication spyeye postinstall obfuscation postinstall file manipulation postinstall system command postinstall crypto operations

Plugin Configuration

JetBrains plugins declare dependencies and extension points in plugin.xml. Plugins can register actions, services, and listeners that run within the IDE process.

JETBRAINS-MANIFEST-APPLICATION-SERVICE-net.avenwu.tools.biu.config.DefaultPreference

JETBRAINS-MANIFEST-APPLICATION-COMPONENT-net.avenwu.tools.biu.LaunchApplication

JETBRAINS-MANIFEST-ACTION-OptionPNG

JETBRAINS-MANIFEST-ACTION-ToolPNGBatch

About This Extension

An IntelliJ IDEA plugin which makes PNG compression much more convenient. It's powered by the well known pngquant library and API from tinypng.

Detailed Findings

85 total

YARA Rule Matches

6 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

Domains

Strings

All Indicators · 66

Domain

detected Domain: launchapplication.java

XIOC detected Domain: launchapplication.java

extracted_from_files

Domain

detected Domain: jniloader.java

XIOC detected Domain: jniloader.java

extracted_from_files

Domain

detected Domain: gmail.com

XIOC detected Domain: gmail.com

extracted_from_files

Domain

detected Domain: tinypng.com

XIOC detected Domain: tinypng.com

extracted_from_files

Domain

detected Domain: pngquant.org

XIOC detected Domain: pngquant.org

extracted_from_files

Domain

detected Domain: settingconfiguration.java

XIOC detected Domain: settingconfiguration.java

extracted_from_files

Domain

detected Domain: note.gnu.build

XIOC detected Domain: note.gnu.build

extracted_from_files

Domain

detected Domain: res.java

XIOC detected Domain: res.java

extracted_from_files

Domain

detected Domain: png.java

XIOC detected Domain: png.java

extracted_from_files

Domain

detected Domain: plt.got

XIOC detected Domain: plt.got

extracted_from_files

Domain

detected Domain: d.pl

XIOC detected Domain: d.pl

extracted_from_files

Domain

detected Domain: onfilechosenlistener.java

XIOC detected Domain: onfilechosenlistener.java

extracted_from_files

Domain

detected Domain: avenwu.github.io

XIOC detected Domain: avenwu.github.io

extracted_from_files

URL

detected URL: https://avenwu.github.io/biu/

XIOC detected URL: https://avenwu.github.io/biu/

extracted_from_files

URL

detected URL: https://tinypng.com/developers

XIOC detected URL: https://tinypng.com/developers

extracted_from_files

URL

detected URL: http://blog.hacktons.cn/biu/

XIOC detected URL: http://blog.hacktons.cn/biu/

extracted_from_files

Domain

detected Domain: l.is

XIOC detected Domain: l.is

extracted_from_files

Domain

detected Domain: defaultpreference.java

XIOC detected Domain: defaultpreference.java

extracted_from_files

Domain

detected Domain: k.gg

XIOC detected Domain: k.gg

extracted_from_files

URL

detected URL: https://avenwu.github.io/biu

XIOC detected URL: https://avenwu.github.io/biu

extracted_from_files

URL

detected URL: https://pngquant.org/

XIOC detected URL: https://pngquant.org/

extracted_from_files

URL

detected URL: https://tinypng.com/

XIOC detected URL: https://tinypng.com/

extracted_from_files

Domain

detected Domain: q.mp

XIOC detected Domain: q.mp

extracted_from_files

Domain

detected Domain: k.us

XIOC detected Domain: k.us

extracted_from_files

Domain

detected Domain: 2z.at

XIOC detected Domain: 2z.at

extracted_from_files

Domain

detected Domain: 0.ng

XIOC detected Domain: 0.ng

extracted_from_files

Domain

detected Domain: q.bt

XIOC detected Domain: q.bt

extracted_from_files

Domain

detected Domain: x.tj

XIOC detected Domain: x.tj

extracted_from_files

Domain

detected Domain: j.si

XIOC detected Domain: j.si

extracted_from_files

Domain

detected Domain: liqobject.java

XIOC detected Domain: liqobject.java

extracted_from_files

Domain

detected Domain: pngquant.java

XIOC detected Domain: pngquant.java

extracted_from_files

Domain

detected Domain: pngquantexception.java

XIOC detected Domain: pngquantexception.java

extracted_from_files

Domain

detected Domain: result.java

XIOC detected Domain: result.java

extracted_from_files

Domain

detected Domain: s.lr

XIOC detected Domain: s.lr

extracted_from_files

Domain

detected Domain: g.bh

XIOC detected Domain: g.bh

extracted_from_files

Domain

detected Domain: o.mg

XIOC detected Domain: o.mg

extracted_from_files

Domain

detected Domain: keycellrenderer.java

XIOC detected Domain: keycellrenderer.java

extracted_from_files

Domain

detected Domain: quickcompressdialog.java

XIOC detected Domain: quickcompressdialog.java

extracted_from_files

Domain

detected Domain: quickpresenter.java

XIOC detected Domain: quickpresenter.java

extracted_from_files

Domain

detected Domain: settingconfigureview.java

XIOC detected Domain: settingconfigureview.java

extracted_from_files

Domain

detected Domain: blog.hacktons.cn

XIOC detected Domain: blog.hacktons.cn

extracted_from_files

Domain

detected Domain: tablepresenter.java

XIOC detected Domain: tablepresenter.java

extracted_from_files

Domain

detected Domain: image.java

XIOC detected Domain: image.java

extracted_from_files

Domain

detected Domain: batchcompressworker.java

XIOC detected Domain: batchcompressworker.java

extracted_from_files

Domain

detected Domain: singlecompressworker.java

XIOC detected Domain: singlecompressworker.java

extracted_from_files

Domain

detected Domain: tinyhelper.java

XIOC detected Domain: tinyhelper.java

extracted_from_files

Domain

detected Domain: basecellrenderer.java

XIOC detected Domain: basecellrenderer.java

extracted_from_files

Domain

detected Domain: batchcompresstabledialog.java

XIOC detected Domain: batchcompresstabledialog.java

extracted_from_files

Domain

detected Domain: bodycellrenderer.java

XIOC detected Domain: bodycellrenderer.java

extracted_from_files

Domain

detected Domain: imagetablemodel.java

XIOC detected Domain: imagetablemodel.java

extracted_from_files

Domain

detected Domain: g.fo

XIOC detected Domain: g.fo

extracted_from_files

Domain

detected Domain: icon.java

XIOC detected Domain: icon.java

extracted_from_files

Domain

detected Domain: autoimageminify.java

XIOC detected Domain: autoimageminify.java

extracted_from_files

Domain

detected Domain: imageminify.java

XIOC detected Domain: imageminify.java

extracted_from_files

Domain

detected Domain: imageminifyfactory.java

XIOC detected Domain: imageminifyfactory.java

extracted_from_files

Domain

detected Domain: pngquantimageminify.java

XIOC detected Domain: pngquantimageminify.java

extracted_from_files

Domain

detected Domain: tinyimageminify.java

XIOC detected Domain: tinyimageminify.java

extracted_from_files

Domain

detected Domain: uikit.java

XIOC detected Domain: uikit.java

extracted_from_files

Domain

detected Domain: utils.java

XIOC detected Domain: utils.java

extracted_from_files

Domain

detected Domain: optionpngmenuaction.java

XIOC detected Domain: optionpngmenuaction.java

extracted_from_files

Domain

detected Domain: toolpngaction.java

XIOC detected Domain: toolpngaction.java

extracted_from_files

Domain

detected Domain: toolpngbatchaction.java

XIOC detected Domain: toolpngbatchaction.java

extracted_from_files

Domain

detected Domain: fileitem.java

XIOC detected Domain: fileitem.java

extracted_from_files

Domain

detected Domain: keyitem.java

XIOC detected Domain: keyitem.java

extracted_from_files

Domain

detected Domain: refptr.free

XIOC detected Domain: refptr.free

extracted_from_files

Domain

detected Domain: libc.so

XIOC detected Domain: libc.so

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Biu is a jetbrains extension published by wu aven. Version 0.2.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 152 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

Critical: 2 finding(s)
High: 13 finding(s)
Medium: 67 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Biu is published by wu aven on the jetbrains marketplace. The extension has approximately 8K users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Php Inspections (EA Ultimate)

EA Inspections Team

CRITICAL 18K users

JetBrains Hub integration

JetBrains s.r.o.

CRITICAL 4K users

DeltaShareXP

deltavi

CRITICAL 1K users

DiamondSpin

Unknown Developer

CRITICAL 3K users

ChatGPT - EasyCode

EasyCode

CRITICAL 1.2M users

Custom MybatisPlus Generator

zhanwang weilai

CRITICAL 2K users

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

Plugin Configuration

About This Extension

Detailed Findings

OBFUSCATION-supply_chain_binary

OBFUSCATION-supply_chain_binary

JETBRAINS-MANIFEST-APPLICATION-SERVICE-net.avenwu.tools.biu.config.DefaultPreference

JETBRAINS-MANIFEST-APPLICATION-COMPONENT-net.avenwu.tools.biu.LaunchApplication

HASH-85e271c4b3b76cec

HASH-de80f8af746d891d

HASH-1ddfdfdcb8d9c91c

HASH-def2d0cf8f2b5284

HASH-fa57257ea9d36522

HASH-9c2147a00c0c785d

HASH-792bd3937a0bee5c

HASH-2afc3e9223b7dc34

HASH-5e949ebcd13972b7

HASH-13f44a2f6ead058d

HASH-500b850404098f0a

HASH-c1433d6c3ffdc159

HASH-5c1cf9a03cc61858

HASH-8790ebdfe481b4dd

HASH-52209bd5514c96a9

HASH-44866d7841c40cec

HASH-544585501d14408d

HASH-85f2d196ee45e4e8

HASH-083f3909533391d2

HASH-253751e723de7943

HASH-a1e18db9cfb4609d

HASH-0fc68a9410e5bd35

HASH-45362772e1665f13

HASH-7c9e32bb2297f4c0

HASH-c771b227708415b3

JETBRAINS-MANIFEST-ACTION-OptionPNG

JETBRAINS-MANIFEST-ACTION-ToolPNGBatch

HASH-a548b639059ec218

HASH-e5cd99618f4ae287

HASH-afcc784deb38dfd1

HASH-98ad0de4b52e835d

HASH-606ecb4d559583f4

HASH-114bdc1f47338a68

HASH-9558cfb5bf05fe34

HASH-9c4a60208f19b556

HASH-dcdf5b0481f7b585

HASH-0d87395fcf05fb9d

HASH-4ebee35d41fed0b1

HASH-6dc08e33643f80f9

HASH-395ab5e77c9753ab

HASH-a9a1cea0f0751e68

HASH-e09c7fb45810e83b

HASH-af01728d54bca23e

HASH-1ec1e3faebc033bc

HASH-90d3a01ef2ac62b2

HASH-271f09f540e13d7a

HASH-917cc385d1391425

HASH-1a5067e7ef275408

HASH-6326ed77763af5ab

HASH-b2286aad29a4ede6

HASH-9b7f4b82250ddd2c

HASH-73e0f224528ca4b1

HASH-f2d64ecc4672e28d

HASH-fd630631ae39e2e4

HASH-caf166cef6ae8c4b

HASH-c7b44c2c256c9d34

HASH-2e7aae33776d44dc

HASH-6c26aa722a46531f

HASH-13be18b6e95d43eb

HASH-aba09dcee39c0246

HASH-175d56cb3c8a907d

HASH-616aa09a54f6cbb9

HASH-2be633fe6fb25fd5

HASH-d2628779d84683e6

HASH-f005e204d9680626

HASH-6d21d1d610a14ba1

HASH-1cc716e29539adcd

HASH-974ccb9feb509b59

HASH-37d40c66dd0e0204