Is "Claude Plugin Marketplace" on OpenVSX Registry Safe to Install?

yidayoung · openvsx · v0.1.1

Claude Code Plugin Marketplace: browse, install, and manage Claude Code skill plugins

Risk Assessment

Analyzed
100
out of 100
CRITICAL

531 security findings detected across all analyzers

Open VSX extension analyzed via package manifest and static code analysis

Severity Breakdown

0
Critical
77
High
389
Medium
0
Low
0
Info

Finding Categories

77
Malware Signatures
4
Network
373
IoC Indicators

YARA Rules Matched

11 rules(77 hits)
credential env files postinstall file manipulation postinstall file download postinstall system command postinstall obfuscation postinstall network communication NoUseWeakRandom postinstall crypto operations postinstall persistence mechanism OriginsNotVerified postinstall environment access

About This Extension

Claude Code Plugin Marketplace: browse, install, and manage Claude Code skill plugins

Detailed Findings

146 total

YARA Rule Matches

11 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
44
IP Addresses
4
Domains
326
Strings
373

All Indicators · 373

Domain
detected Domain: n.space

XIOC detected Domain: n.space

extracted_from_files

Domain
detected Domain: e.id-n.id

XIOC detected Domain: e.id-n.id

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

URL
detected URL: http://schemas.microsoft.com/developer/vsx-schema/2011

XIOC detected URL: http://schemas.microsoft.com/developer/vsx-schema/2011

extracted_from_files

Domain
detected Domain: f.map

XIOC detected Domain: f.map

extracted_from_files

URL
detected URL: http://schemas.microsoft.com/developer/vsx-schema-design/2011

XIOC detected URL: http://schemas.microsoft.com/developer/vsx-schema-design/2011

extracted_from_files

URL
detected URL: https://github.com/yidayoung/claude-plugin-marketplace.git

XIOC detected URL: https://github.com/yidayoung/claude-plugin-marketplace.git

extracted_from_files

URL
detected URL: https://github.com/yidayoung/claude-plugin-marketplace/issues

XIOC detected URL: https://github.com/yidayoung/claude-plugin-marketplace/issues

extracted_from_files

URL
detected URL: https://github.com/yidayoung/claude-plugin-marketplace#readme

XIOC detected URL: https://github.com/yidayoung/claude-plugin-marketplace#readme

extracted_from_files

Domain
detected Domain: m.map

XIOC detected Domain: m.map

extracted_from_files

Domain
detected Domain: readme.zh-cn.md

XIOC detected Domain: readme.zh-cn.md

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: keepachangelog.com

XIOC detected Domain: keepachangelog.com

extracted_from_files

Domain
detected Domain: schemas.openxmlformats.org

XIOC detected Domain: schemas.openxmlformats.org

extracted_from_files

IP
detected IP: 3.5.7.7

XIOC detected IP: 3.5.7.7

extracted_from_files

IP
detected IP: ::bac

XIOC detected IP: ::bac

extracted_from_files

IP
detected IP: ea::

XIOC detected IP: ea::

extracted_from_files

Domain
detected Domain: installedplugins.map

XIOC detected Domain: installedplugins.map

extracted_from_files

Domain
detected Domain: m.name

XIOC detected Domain: m.name

extracted_from_files

Domain
detected Domain: 1.logger.info

XIOC detected Domain: 1.logger.info

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain
detected Domain: cli.download

XIOC detected Domain: cli.download

extracted_from_files

Domain
detected Domain: claude.ai

XIOC detected Domain: claude.ai

extracted_from_files

Domain
detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

Domain
detected Domain: plugin.id

XIOC detected Domain: plugin.id

extracted_from_files

Domain
detected Domain: result.data

XIOC detected Domain: result.data

extracted_from_files

Domain
detected Domain: api.github.com

XIOC detected Domain: api.github.com

extracted_from_files

Domain
detected Domain: extension.js.map

XIOC detected Domain: extension.js.map

extracted_from_files

Domain
detected Domain: plugininfo.name

XIOC detected Domain: plugininfo.name

extracted_from_files

Domain
detected Domain: item.name

XIOC detected Domain: item.name

extracted_from_files

Domain
detected Domain: p.name

XIOC detected Domain: p.name

extracted_from_files

Domain
detected Domain: batch.map

XIOC detected Domain: batch.map

extracted_from_files

Domain
detected Domain: marketplaces.map

XIOC detected Domain: marketplaces.map

extracted_from_files

Domain
detected Domain: marketplaceconfig.js.map

XIOC detected Domain: marketplaceconfig.js.map

extracted_from_files

Domain
detected Domain: dataloader.js.map

XIOC detected Domain: dataloader.js.map

extracted_from_files

Domain
detected Domain: p.author

XIOC detected Domain: p.author

extracted_from_files

Domain
detected Domain: marketplace.name

XIOC detected Domain: marketplace.name

extracted_from_files

Domain
detected Domain: plugin.name

XIOC detected Domain: plugin.name

extracted_from_files

Domain
detected Domain: events.js.map

XIOC detected Domain: events.js.map

extracted_from_files

Domain
detected Domain: this.off

XIOC detected Domain: this.off

extracted_from_files

Domain
detected Domain: plugindatastore.js.map

XIOC detected Domain: plugindatastore.js.map

extracted_from_files

Domain
detected Domain: cached.data

XIOC detected Domain: cached.data

extracted_from_files

Domain
detected Domain: builtin.name

XIOC detected Domain: builtin.name

extracted_from_files

Domain
detected Domain: market.name

XIOC detected Domain: market.name

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: handlers.js.map

XIOC detected Domain: handlers.js.map

extracted_from_files

Domain
detected Domain: filteredplugins.map

XIOC detected Domain: filteredplugins.map

extracted_from_files

Domain
detected Domain: sidebarwebviewview.js.map

XIOC detected Domain: sidebarwebviewview.js.map

extracted_from_files

Domain
detected Domain: code.visualstudio.com

XIOC detected Domain: code.visualstudio.com

extracted_from_files

Domain
detected Domain: plugindetailspanel.js.map

XIOC detected Domain: plugindetailspanel.js.map

extracted_from_files

Domain
detected Domain: marketplacepanel.js.map

XIOC detected Domain: marketplacepanel.js.map

extracted_from_files

Domain
detected Domain: types.js.map

XIOC detected Domain: types.js.map

extracted_from_files

Domain
detected Domain: a.name

XIOC detected Domain: a.name

extracted_from_files

Domain
detected Domain: frontmatter.tools

XIOC detected Domain: frontmatter.tools

extracted_from_files

Domain
detected Domain: frontmatter.name

XIOC detected Domain: frontmatter.name

extracted_from_files

Domain
detected Domain: skill.md

XIOC detected Domain: skill.md

extracted_from_files

Domain
detected Domain: skill.name

XIOC detected Domain: skill.name

extracted_from_files

Domain
detected Domain: s.name

XIOC detected Domain: s.name

extracted_from_files

Domain
detected Domain: entry.name

XIOC detected Domain: entry.name

extracted_from_files

Domain
detected Domain: fileparser.js.map

XIOC detected Domain: fileparser.js.map

extracted_from_files

Domain
detected Domain: entries.map

XIOC detected Domain: entries.map

extracted_from_files

Domain
detected Domain: contentparser.js.map

XIOC detected Domain: contentparser.js.map

extracted_from_files

Domain
detected Domain: configs.map

XIOC detected Domain: configs.map

extracted_from_files

Domain
detected Domain: command.name

XIOC detected Domain: command.name

extracted_from_files

Domain
detected Domain: c.name

XIOC detected Domain: c.name

extracted_from_files

Domain
detected Domain: agent.name

XIOC detected Domain: agent.name

extracted_from_files

Domain
detected Domain: openfilestrategy.js.map

XIOC detected Domain: openfilestrategy.js.map

extracted_from_files

Domain
detected Domain: htmlsafety.js.map

XIOC detected Domain: htmlsafety.js.map

extracted_from_files

Domain
detected Domain: pluginpathresolver.js.map

XIOC detected Domain: pluginpathresolver.js.map

extracted_from_files

Domain
detected Domain: subitem.name

XIOC detected Domain: subitem.name

extracted_from_files

Domain
detected Domain: plugindetailsservice.js.map

XIOC detected Domain: plugindetailsservice.js.map

extracted_from_files

Domain
detected Domain: plugin.author

XIOC detected Domain: plugin.author

extracted_from_files

Domain
detected Domain: raw.githubusercontent.com

XIOC detected Domain: raw.githubusercontent.com

extracted_from_files

URL
detected Domain: urlutils.js.map

XIOC detected Domain: urlutils.js.map

extracted_from_files

Domain
detected Domain: parseutils.js.map

XIOC detected Domain: parseutils.js.map

extracted_from_files

Domain
detected Domain: repo.name

XIOC detected Domain: repo.name

extracted_from_files

Domain
detected Domain: logger.js.map

XIOC detected Domain: logger.js.map

extracted_from_files

Domain
detected Domain: loglevel.info

XIOC detected Domain: loglevel.info

extracted_from_files

Domain
detected Domain: fileutils.js.map

XIOC detected Domain: fileutils.js.map

extracted_from_files

Domain
detected Domain: sourcetypes.js.map

XIOC detected Domain: sourcetypes.js.map

extracted_from_files

Domain
detected Domain: e.author

XIOC detected Domain: e.author

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: www.ibm.com

XIOC detected Domain: www.ibm.com

extracted_from_files

Domain
detected Domain: o.map

XIOC detected Domain: o.map

extracted_from_files

Domain
detected Domain: e.map

XIOC detected Domain: e.map

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: view.sidebar.name

XIOC detected Domain: view.sidebar.name

extracted_from_files

Domain
detected Domain: this.property

XIOC detected Domain: this.property

extracted_from_files

Domain
detected Domain: g.map

XIOC detected Domain: g.map

extracted_from_files

Domain
detected Domain: d.map

XIOC detected Domain: d.map

extracted_from_files

Domain
detected Domain: header.author

XIOC detected Domain: header.author

extracted_from_files

Domain
detected Domain: e.properties

XIOC detected Domain: e.properties

extracted_from_files

Domain
detected Domain: ec.name

XIOC detected Domain: ec.name

extracted_from_files

Domain
detected Domain: sc.zero

XIOC detected Domain: sc.zero

extracted_from_files

Domain
detected Domain: gc.limited

XIOC detected Domain: gc.limited

extracted_from_files

Domain
detected Domain: x.prototype.space

XIOC detected Domain: x.prototype.space

extracted_from_files

Domain
detected Domain: x.prototype.property

XIOC detected Domain: x.prototype.property

extracted_from_files

Domain
detected Domain: w.prototype.space

XIOC detected Domain: w.prototype.space

extracted_from_files

Domain
detected Domain: w.prototype.property

XIOC detected Domain: w.prototype.property

extracted_from_files

Domain
detected Domain: i.property

XIOC detected Domain: i.property

extracted_from_files

Domain
detected Domain: this.space

XIOC detected Domain: this.space

extracted_from_files

Domain
detected Domain: t.space

XIOC detected Domain: t.space

extracted_from_files

Domain
detected Domain: ot.prototype.place

XIOC detected Domain: ot.prototype.place

extracted_from_files

Domain
detected Domain: ot.prototype.name

XIOC detected Domain: ot.prototype.name

extracted_from_files

Domain
detected Domain: this.place

XIOC detected Domain: this.place

extracted_from_files

Domain
detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain
detected Domain: i.place

XIOC detected Domain: i.place

extracted_from_files

Domain
detected Domain: e.space

XIOC detected Domain: e.space

extracted_from_files

Domain
detected Domain: r.data

XIOC detected Domain: r.data

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Domain
detected Domain: n.style

XIOC detected Domain: n.style

extracted_from_files

Domain
detected Domain: at.call

XIOC detected Domain: at.call

extracted_from_files

Domain
detected Domain: t.properties

XIOC detected Domain: t.properties

extracted_from_files

Domain
detected Domain: r.space

XIOC detected Domain: r.space

extracted_from_files

Domain
detected Domain: n.next

XIOC detected Domain: n.next

extracted_from_files

Domain
detected Domain: rt.call

XIOC detected Domain: rt.call

extracted_from_files

Domain
detected Domain: r.property

XIOC detected Domain: r.property

extracted_from_files

Domain
detected Domain: e.property

XIOC detected Domain: e.property

extracted_from_files

Domain
detected Domain: r.value.data

XIOC detected Domain: r.value.data

extracted_from_files

Domain
detected Domain: r.name

XIOC detected Domain: r.name

extracted_from_files

Domain
detected Domain: i.properties

XIOC detected Domain: i.properties

extracted_from_files

Domain
detected Domain: r.now

XIOC detected Domain: r.now

extracted_from_files

Domain
detected Domain: n.open

XIOC detected Domain: n.open

extracted_from_files

Domain
detected Domain: exit.call

XIOC detected Domain: exit.call

extracted_from_files

Domain
detected Domain: r.events

XIOC detected Domain: r.events

extracted_from_files

Domain
detected Domain: i.next

XIOC detected Domain: i.next

extracted_from_files

Domain
detected Domain: t.now

XIOC detected Domain: t.now

extracted_from_files

Domain
detected Domain: t.events

XIOC detected Domain: t.events

extracted_from_files

Domain
detected Domain: c.events

XIOC detected Domain: c.events

extracted_from_files

Domain
detected Domain: e.previous.call

XIOC detected Domain: e.previous.call

extracted_from_files

Domain
detected Domain: cn.call

XIOC detected Domain: cn.call

extracted_from_files

Domain
detected Domain: d.next

XIOC detected Domain: d.next

extracted_from_files

Domain
detected Domain: o.events

XIOC detected Domain: o.events

extracted_from_files

Domain
detected Domain: tokenizer.events

XIOC detected Domain: tokenizer.events

extracted_from_files

Domain
detected Domain: this.events

XIOC detected Domain: this.events

extracted_from_files

Domain
detected Domain: c.call

XIOC detected Domain: c.call

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: t.call

XIOC detected Domain: t.call

extracted_from_files

Domain
detected Domain: a.call

XIOC detected Domain: a.call

extracted_from_files

Domain
detected Domain: dr.call

XIOC detected Domain: dr.call

extracted_from_files

Domain
detected Domain: e.tokenize.call

XIOC detected Domain: e.tokenize.call

extracted_from_files

Domain
detected Domain: t.tokenize.call

XIOC detected Domain: t.tokenize.call

extracted_from_files

Domain
detected Domain: qr.call

XIOC detected Domain: qr.call

extracted_from_files

Domain
detected Domain: n.properties

XIOC detected Domain: n.properties

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: or.call

XIOC detected Domain: or.call

extracted_from_files

Domain
detected Domain: s.data

XIOC detected Domain: s.data

extracted_from_files

Domain
detected Domain: n.call

XIOC detected Domain: n.call

extracted_from_files

Domain
detected Domain: s.call

XIOC detected Domain: s.call

extracted_from_files

Domain
detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain
detected Domain: this.data

XIOC detected Domain: this.data

extracted_from_files

Domain
detected Domain: ti.call

XIOC detected Domain: ti.call

extracted_from_files

Domain
detected Domain: ni.call

XIOC detected Domain: ni.call

extracted_from_files

Domain
detected Domain: e.run

XIOC detected Domain: e.run

extracted_from_files

Domain
detected Domain: n.one

XIOC detected Domain: n.one

extracted_from_files

Domain
detected Domain: a.one

XIOC detected Domain: a.one

extracted_from_files

Domain
detected Domain: r.global

XIOC detected Domain: r.global

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: t.to

XIOC detected Domain: t.to

extracted_from_files

Domain
detected Domain: this.run

XIOC detected Domain: this.run

extracted_from_files

Domain
detected Domain: r.run

XIOC detected Domain: r.run

extracted_from_files

Domain
detected Domain: n.run

XIOC detected Domain: n.run

extracted_from_files

Domain
detected Domain: ki.call

XIOC detected Domain: ki.call

extracted_from_files

Domain
detected Domain: vs.call

XIOC detected Domain: vs.call

extracted_from_files

Domain
detected Domain: r.safe

XIOC detected Domain: r.safe

extracted_from_files

Domain
detected Domain: n.safe

XIOC detected Domain: n.safe

extracted_from_files

Domain
detected Domain: this.config.exit.autolinkemail.call

XIOC detected Domain: this.config.exit.autolinkemail.call

extracted_from_files

Domain
detected Domain: this.config.exit.data.call

XIOC detected Domain: this.config.exit.data.call

extracted_from_files

Domain
detected Domain: this.config.exit.autolinkprotocol.call

XIOC detected Domain: this.config.exit.autolinkprotocol.call

extracted_from_files

Domain
detected Domain: this.config.enter.autolinkprotocol.call

XIOC detected Domain: this.config.enter.autolinkprotocol.call

extracted_from_files

Domain
detected Domain: aa.call

XIOC detected Domain: aa.call

extracted_from_files

Domain
detected Domain: o.name

XIOC detected Domain: o.name

extracted_from_files

Domain
detected Domain: wo.call

XIOC detected Domain: wo.call

extracted_from_files

Domain
detected Domain: bo.call

XIOC detected Domain: bo.call

extracted_from_files

Domain
detected Domain: mo.call

XIOC detected Domain: mo.call

extracted_from_files

Domain
detected Domain: ko.call

XIOC detected Domain: ko.call

extracted_from_files

Domain
detected Domain: i.call

XIOC detected Domain: i.call

extracted_from_files

Domain
detected Domain: r.id

XIOC detected Domain: r.id

extracted_from_files

Domain
detected Domain: ma.prototype.space

XIOC detected Domain: ma.prototype.space

extracted_from_files

Domain
detected Domain: ma.prototype.property

XIOC detected Domain: ma.prototype.property

extracted_from_files

Domain
detected Domain: xa.prototype.space

XIOC detected Domain: xa.prototype.space

extracted_from_files

Domain
detected Domain: xa.prototype.property

XIOC detected Domain: xa.prototype.property

extracted_from_files

Domain
detected Domain: ya.call

XIOC detected Domain: ya.call

extracted_from_files

Domain
detected Domain: n.id

XIOC detected Domain: n.id

extracted_from_files

Domain
detected Domain: i.name

XIOC detected Domain: i.name

extracted_from_files

Domain
detected Domain: ll.call

XIOC detected Domain: ll.call

extracted_from_files

Domain
detected Domain: vc.data

XIOC detected Domain: vc.data

extracted_from_files

Domain
detected Domain: a.properties

XIOC detected Domain: a.properties

extracted_from_files

Domain
detected Domain: e.schema.space

XIOC detected Domain: e.schema.space

extracted_from_files

Domain
detected Domain: il.call

XIOC detected Domain: il.call

extracted_from_files

Domain
detected Domain: e.next

XIOC detected Domain: e.next

extracted_from_files

Domain
detected Domain: dc.center

XIOC detected Domain: dc.center

extracted_from_files

Domain
detected Domain: dc.br

XIOC detected Domain: dc.br

extracted_from_files

URL
detected URL: http://www.w3.org/1999/xlink

XIOC detected URL: http://www.w3.org/1999/xlink

extracted_from_files

Domain
detected Domain: w.call

XIOC detected Domain: w.call

extracted_from_files

URL
detected URL: http://www.w3.org/XML/1998/namespace

XIOC detected URL: http://www.w3.org/XML/1998/namespace

extracted_from_files

Domain
detected Domain: oc.zero

XIOC detected Domain: oc.zero

extracted_from_files

Domain
detected Domain: gl.space

XIOC detected Domain: gl.space

extracted_from_files

Domain
detected Domain: dc.ms

XIOC detected Domain: dc.ms

extracted_from_files

Domain
detected Domain: dc.mn

XIOC detected Domain: dc.mn

extracted_from_files

Domain
detected Domain: dc.mo

XIOC detected Domain: dc.mo

extracted_from_files

Domain
detected Domain: dc.menu

XIOC detected Domain: dc.menu

extracted_from_files

Domain
detected Domain: dc.link

XIOC detected Domain: dc.link

extracted_from_files

Domain
detected Domain: dc.li

XIOC detected Domain: dc.li

extracted_from_files

Domain
detected Domain: dc.hr

XIOC detected Domain: dc.hr

extracted_from_files

Domain
detected Domain: dc.tt

XIOC detected Domain: dc.tt

extracted_from_files

Domain
detected Domain: dc.tr

XIOC detected Domain: dc.tr

extracted_from_files

Domain
detected Domain: dc.th

XIOC detected Domain: dc.th

extracted_from_files

Domain
detected Domain: dc.td

XIOC detected Domain: dc.td

extracted_from_files

Domain
detected Domain: dc.style

XIOC detected Domain: dc.style

extracted_from_files

Domain
detected Domain: dc.select

XIOC detected Domain: dc.select

extracted_from_files

Domain
detected Domain: dc.search

XIOC detected Domain: dc.search

extracted_from_files

Domain
detected Domain: cc.mo

XIOC detected Domain: cc.mo

extracted_from_files

Domain
detected Domain: cc.menu

XIOC detected Domain: cc.menu

extracted_from_files

Domain
detected Domain: cc.link

XIOC detected Domain: cc.link

extracted_from_files

Domain
detected Domain: cc.li

XIOC detected Domain: cc.li

extracted_from_files

Domain
detected Domain: cc.hr

XIOC detected Domain: cc.hr

extracted_from_files

Domain
detected Domain: cc.center

XIOC detected Domain: cc.center

extracted_from_files

Domain
detected Domain: cc.br

XIOC detected Domain: cc.br

extracted_from_files

Domain
detected Domain: cc.th

XIOC detected Domain: cc.th

extracted_from_files

Domain
detected Domain: cc.td

XIOC detected Domain: cc.td

extracted_from_files

Domain
detected Domain: cc.style

XIOC detected Domain: cc.style

extracted_from_files

Domain
detected Domain: cc.select

XIOC detected Domain: cc.select

extracted_from_files

Domain
detected Domain: cc.search

XIOC detected Domain: cc.search

extracted_from_files

Domain
detected Domain: cc.ms

XIOC detected Domain: cc.ms

extracted_from_files

Domain
detected Domain: cc.mn

XIOC detected Domain: cc.mn

extracted_from_files

Domain
detected Domain: ac.hr

XIOC detected Domain: ac.hr

extracted_from_files

Domain
detected Domain: c.center

XIOC detected Domain: c.center

extracted_from_files

Domain
detected Domain: ac.center

XIOC detected Domain: ac.center

extracted_from_files

Domain
detected Domain: c.br

XIOC detected Domain: c.br

extracted_from_files

Domain
detected Domain: ac.br

XIOC detected Domain: ac.br

extracted_from_files

Domain
detected Domain: cc.tt

XIOC detected Domain: cc.tt

extracted_from_files

Domain
detected Domain: cc.tr

XIOC detected Domain: cc.tr

extracted_from_files

Domain
detected Domain: c.menu

XIOC detected Domain: c.menu

extracted_from_files

Domain
detected Domain: ac.menu

XIOC detected Domain: ac.menu

extracted_from_files

Domain
detected Domain: c.link

XIOC detected Domain: c.link

extracted_from_files

Domain
detected Domain: ac.link

XIOC detected Domain: ac.link

extracted_from_files

Domain
detected Domain: c.li

XIOC detected Domain: c.li

extracted_from_files

Domain
detected Domain: ac.li

XIOC detected Domain: ac.li

extracted_from_files

Domain
detected Domain: c.hr

XIOC detected Domain: c.hr

extracted_from_files

Domain
detected Domain: ac.search

XIOC detected Domain: ac.search

extracted_from_files

Domain
detected Domain: c.ms

XIOC detected Domain: c.ms

extracted_from_files

Domain
detected Domain: ac.ms

XIOC detected Domain: ac.ms

extracted_from_files

Domain
detected Domain: c.mn

XIOC detected Domain: c.mn

extracted_from_files

Domain
detected Domain: ac.mn

XIOC detected Domain: ac.mn

extracted_from_files

Domain
detected Domain: c.mo

XIOC detected Domain: c.mo

extracted_from_files

Domain
detected Domain: ac.mo

XIOC detected Domain: ac.mo

extracted_from_files

Domain
detected Domain: c.td

XIOC detected Domain: c.td

extracted_from_files

Domain
detected Domain: ac.td

XIOC detected Domain: ac.td

extracted_from_files

Domain
detected Domain: c.style

XIOC detected Domain: c.style

extracted_from_files

Domain
detected Domain: ac.style

XIOC detected Domain: ac.style

extracted_from_files

Domain
detected Domain: c.select

XIOC detected Domain: c.select

extracted_from_files

Domain
detected Domain: ac.select

XIOC detected Domain: ac.select

extracted_from_files

Domain
detected Domain: c.search

XIOC detected Domain: c.search

extracted_from_files

Domain
detected Domain: fc.br

XIOC detected Domain: fc.br

extracted_from_files

Domain
detected Domain: c.tt

XIOC detected Domain: c.tt

extracted_from_files

Domain
detected Domain: ac.tt

XIOC detected Domain: ac.tt

extracted_from_files

Domain
detected Domain: c.tr

XIOC detected Domain: c.tr

extracted_from_files

Domain
detected Domain: ac.tr

XIOC detected Domain: ac.tr

extracted_from_files

Domain
detected Domain: c.th

XIOC detected Domain: c.th

extracted_from_files

Domain
detected Domain: ac.th

XIOC detected Domain: ac.th

extracted_from_files

Domain
detected Domain: fc.style

XIOC detected Domain: fc.style

extracted_from_files

Domain
detected Domain: fc.select

XIOC detected Domain: fc.select

extracted_from_files

Domain
detected Domain: fc.menu

XIOC detected Domain: fc.menu

extracted_from_files

Domain
detected Domain: fc.link

XIOC detected Domain: fc.link

extracted_from_files

Domain
detected Domain: fc.li

XIOC detected Domain: fc.li

extracted_from_files

Domain
detected Domain: fc.hr

XIOC detected Domain: fc.hr

extracted_from_files

Domain
detected Domain: fc.center

XIOC detected Domain: fc.center

extracted_from_files

Domain
detected Domain: pc.data

XIOC detected Domain: pc.data

extracted_from_files

Domain
detected Domain: fc.ms

XIOC detected Domain: fc.ms

extracted_from_files

Domain
detected Domain: fc.mn

XIOC detected Domain: fc.mn

extracted_from_files

Domain
detected Domain: fc.mo

XIOC detected Domain: fc.mo

extracted_from_files

Domain
detected Domain: fc.tr

XIOC detected Domain: fc.tr

extracted_from_files

Domain
detected Domain: fc.th

XIOC detected Domain: fc.th

extracted_from_files

Domain
detected Domain: fc.td

XIOC detected Domain: fc.td

extracted_from_files

Domain
detected Domain: e.attrs.map

XIOC detected Domain: e.attrs.map

extracted_from_files

Domain
detected Domain: tc.no

XIOC detected Domain: tc.no

extracted_from_files

Domain
detected Domain: this.currenttoken.data

XIOC detected Domain: this.currenttoken.data

extracted_from_files

Domain
detected Domain: this.currentattr.name

XIOC detected Domain: this.currentattr.name

extracted_from_files

Domain
detected Domain: r.call

XIOC detected Domain: r.call

extracted_from_files

Domain
detected Domain: hl.space

XIOC detected Domain: hl.space

extracted_from_files

Domain
detected Domain: xc.data

XIOC detected Domain: xc.data

extracted_from_files

URL
detected URL: http://www.w3.org/1999/xhtml

XIOC detected URL: http://www.w3.org/1999/xhtml

extracted_from_files

Domain
detected Domain: tc.limited

XIOC detected Domain: tc.limited

extracted_from_files

Domain
detected Domain: ku.in

XIOC detected Domain: ku.in

extracted_from_files

Domain
detected Domain: iu.in

XIOC detected Domain: iu.in

extracted_from_files

Domain
detected Domain: n.name

XIOC detected Domain: n.name

extracted_from_files

Domain
detected Domain: ce.call

XIOC detected Domain: ce.call

extracted_from_files

Domain
detected Domain: o.now

XIOC detected Domain: o.now

extracted_from_files

Domain
detected Domain: a.now

XIOC detected Domain: a.now

extracted_from_files

Domain
detected Domain: performance.now

XIOC detected Domain: performance.now

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: object.is

XIOC detected Domain: object.is

extracted_from_files

Domain
detected Domain: this.target

XIOC detected Domain: this.target

extracted_from_files

Domain
detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: n.is

XIOC detected Domain: n.is

extracted_from_files

Domain
detected Domain: e.style

XIOC detected Domain: e.style

extracted_from_files

Domain
detected Domain: l.call

XIOC detected Domain: l.call

extracted_from_files

Domain
detected Domain: u.next

XIOC detected Domain: u.next

extracted_from_files

Domain
detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

Domain
detected Domain: l.data

XIOC detected Domain: l.data

extracted_from_files

Domain
detected Domain: n.data

XIOC detected Domain: n.data

extracted_from_files

Domain
detected Domain: b.data

XIOC detected Domain: b.data

extracted_from_files

Domain
detected Domain: n.target

XIOC detected Domain: n.target

extracted_from_files

Domain
detected Domain: e.top

XIOC detected Domain: e.top

extracted_from_files

Domain
detected Domain: m.call

XIOC detected Domain: m.call

extracted_from_files

Domain
detected Domain: c.next

XIOC detected Domain: c.next

extracted_from_files

Domain
detected Domain: o.next

XIOC detected Domain: o.next

extracted_from_files

Domain
detected Domain: a.next

XIOC detected Domain: a.next

extracted_from_files

Domain
detected Domain: l.next

XIOC detected Domain: l.next

extracted_from_files

Domain
detected Domain: t.next

XIOC detected Domain: t.next

extracted_from_files

Domain
detected Domain: eo.next

XIOC detected Domain: eo.next

extracted_from_files

Domain
detected Domain: r.next

XIOC detected Domain: r.next

extracted_from_files

Domain
detected Domain: r.is

XIOC detected Domain: r.is

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: t.compare

XIOC detected Domain: t.compare

extracted_from_files

Domain
detected Domain: s.next

XIOC detected Domain: s.next

extracted_from_files

Domain
detected Domain: iu.next

XIOC detected Domain: iu.next

extracted_from_files

Domain
detected Domain: uu.next

XIOC detected Domain: uu.next

extracted_from_files

Domain
detected Domain: s.payload.markets

XIOC detected Domain: s.payload.markets

extracted_from_files

Domain
detected Domain: s.payload.marketplaces.map

XIOC detected Domain: s.payload.marketplaces.map

extracted_from_files

Domain
detected Domain: c.map

XIOC detected Domain: c.map

extracted_from_files

Domain
detected Domain: n.map

XIOC detected Domain: n.map

extracted_from_files

Domain
detected Domain: u.call

XIOC detected Domain: u.call

extracted_from_files

Domain
detected Domain: f.memoizedprops.style

XIOC detected Domain: f.memoizedprops.style

extracted_from_files

Domain
detected Domain: l.style

XIOC detected Domain: l.style

extracted_from_files

Domain
detected Domain: changelog.md

XIOC detected Domain: changelog.md

extracted_from_files

Domain
detected Domain: microsoft.visualstudio.services.links.support

XIOC detected Domain: microsoft.visualstudio.services.links.support

extracted_from_files

Domain
detected Domain: schemas.microsoft.com

XIOC detected Domain: schemas.microsoft.com

extracted_from_files

Domain
detected Domain: s.map

XIOC detected Domain: s.map

extracted_from_files

Domain
detected Domain: a.map

XIOC detected Domain: a.map

extracted_from_files

Domain
detected Domain: o.installed.map

XIOC detected Domain: o.installed.map

extracted_from_files

Domain
detected Domain: a.payload.marketplaces.map

XIOC detected Domain: a.payload.marketplaces.map

extracted_from_files

URL
detected URL: https://claude.ai/download'));

XIOC detected URL: https://claude.ai/download'));

extracted_from_files

URL
detected URL: https://claude.ai/download'),

XIOC detected URL: https://claude.ai/download'),

extracted_from_files

URL
detected URL: https://github.com/owner/repo

XIOC detected URL: https://github.com/owner/repo

extracted_from_files

URL
detected URL: https://claude.ai/download

XIOC detected URL: https://claude.ai/download

extracted_from_files

URL
detected URL: https://github.com/yidayoung/claude-plugin-marketplace/releases/tag/v0.1.0

XIOC detected URL: https://github.com/yidayoung/claude-plugin-marketplace/releases/tag/v0.1.0

extracted_from_files

URL
detected URL: https://keepachangelog.com/en/1.0.0/).

XIOC detected URL: https://keepachangelog.com/en/1.0.0/).

extracted_from_files

URL
detected URL: http://schemas.openxmlformats.org/package/2006/content-types

XIOC detected URL: http://schemas.openxmlformats.org/package/2006/content-types

extracted_from_files

URL
detected URL: https://github.com/wshobson/agents',

XIOC detected URL: https://github.com/wshobson/agents',

extracted_from_files

URL
detected URL: https://github.com/yamadashy/repomix',

XIOC detected URL: https://github.com/yamadashy/repomix',

extracted_from_files

URL
detected URL: https://github.com/2389-research/claude-plugins',

XIOC detected URL: https://github.com/2389-research/claude-plugins',

extracted_from_files

URL
detected URL: https://github.com/pleaseai/claude-code-plugins',

XIOC detected URL: https://github.com/pleaseai/claude-code-plugins',

extracted_from_files

URL
detected URL: https://github.com/obra/superpowers-marketplace',

XIOC detected URL: https://github.com/obra/superpowers-marketplace',

extracted_from_files

URL
detected URL: https://github.com/anthropics/claude-plugins-official',

XIOC detected URL: https://github.com/anthropics/claude-plugins-official',

extracted_from_files

URL
detected URL: https://api.github.com/repos/$

XIOC detected URL: https://api.github.com/repos/$

extracted_from_files

URL
detected URL: https://claude.ai/download'

XIOC detected URL: https://claude.ai/download'

extracted_from_files

URL
detected URL: https://github.com/owner/repo.git

XIOC detected URL: https://github.com/owner/repo.git

extracted_from_files

URL
detected URL: https://github.com/thedotmack/claude-mem',

XIOC detected URL: https://github.com/thedotmack/claude-mem',

extracted_from_files

URL
detected URL: https://github.com/jeremylongshore/claude-code-plugins-plus-skills',

XIOC detected URL: https://github.com/jeremylongshore/claude-code-plugins-plus-skills',

extracted_from_files

URL
detected URL: https://github.com/affaan-m/everything-claude-code',

XIOC detected URL: https://github.com/affaan-m/everything-claude-code',

extracted_from_files

URL
detected URL: https://github.com/nextlevelbuilder/ui-ux-pro-max-skill',

XIOC detected URL: https://github.com/nextlevelbuilder/ui-ux-pro-max-skill',

extracted_from_files

URL
detected URL: https://github.com/$

XIOC detected URL: https://github.com/$

extracted_from_files

URL
detected URL: https://raw.githubusercontent.com/$

XIOC detected URL: https://raw.githubusercontent.com/$

extracted_from_files

URL
detected URL: http://localhost:5173/src/sidebar/index.tsx');

XIOC detected URL: http://localhost:5173/src/sidebar/index.tsx');

extracted_from_files

URL
detected URL: http://localhost:5173/src/details/main.tsx');

XIOC detected URL: http://localhost:5173/src/details/main.tsx');

extracted_from_files

URL
detected URL: http://localhost:5173/src/marketplace/main.tsx');

XIOC detected URL: http://localhost:5173/src/marketplace/main.tsx');

extracted_from_files

URL
detected URL: https://github.com/yidayoung/claude-plugin-marketplace/raw/HEAD/screenshot/add-marketplace.png)

XIOC detected URL: https://github.com/yidayoung/claude-plugin-marketplace/raw/HEAD/screenshot/add-marketplace.png)

extracted_from_files

URL
detected URL: https://github.com/yidayoung/claude-plugin-marketplace/raw/HEAD/screenshot/plugin-detail.png)

XIOC detected URL: https://github.com/yidayoung/claude-plugin-marketplace/raw/HEAD/screenshot/plugin-detail.png)

extracted_from_files

URL
detected URL: https://github.com/yidayoung/claude-plugin-marketplace/raw/HEAD/screenshot/sidebar-overview.png)

XIOC detected URL: https://github.com/yidayoung/claude-plugin-marketplace/raw/HEAD/screenshot/sidebar-overview.png)

extracted_from_files

URL
detected URL: https://github.com/yidayoung/claude-plugin-marketplace/blob/HEAD/README.zh-CN.md)

XIOC detected URL: https://github.com/yidayoung/claude-plugin-marketplace/blob/HEAD/README.zh-CN.md)

extracted_from_files

URL
detected URL: https://github.com/yidayoung/claude-plugin-marketplace

XIOC detected URL: https://github.com/yidayoung/claude-plugin-marketplace

extracted_from_files

URL
detected URL: https://reactjs.org/docs/error-decoder.html?invariant=

XIOC detected URL: https://reactjs.org/docs/error-decoder.html?invariant=

extracted_from_files

URL
detected URL: http://

XIOC detected URL: http://

extracted_from_files

URL
detected URL: http://www.ibm.com/data/dtd/v11/ibmxhtml1-transitional.dtd

XIOC detected URL: http://www.ibm.com/data/dtd/v11/ibmxhtml1-transitional.dtd

extracted_from_files

URL
detected URL: https://github.com/syntax-tree/hast-util-to-jsx-runtime

XIOC detected URL: https://github.com/syntax-tree/hast-util-to-jsx-runtime

extracted_from_files

Domain
detected Domain: reactjs.org

XIOC detected Domain: reactjs.org

extracted_from_files

Domain
detected Domain: e.dependencies.map

XIOC detected Domain: e.dependencies.map

extracted_from_files

Domain
detected Domain: o.properties

XIOC detected Domain: o.properties

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Claude Plugin Marketplace is a OpenVSX Registry extension published by yidayoung. Version 0.1.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 531 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 77 finding(s)
  • Medium: 389 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Claude Plugin Marketplace is published by yidayoung on the OpenVSX Registry marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions