Spring Explyt
Based on the RiskyPlugins AI security review of the observed evidence.
Analysis record
- Analysed
- 6 days ago
- Version
- v242.34.112
- Artifact
- SHA256 C43…543
- Source
- Findings (non-IoC)
Evidence ledger
Ranked by severity · findings with a source location link to the code viewer
YARA Rule Matches
10 rules| Severity | Rule | Hits | Files | Metadata |
|---|---|---|---|---|
| LOW | postinstall file download | 4 | spring-bootstrap/lib/spring-initializr.jarspring-bootstrap/lib/jpa.jarspring-bootstrap/lib/spring-core.jar +1 more | - |
| LOW | postinstall crypto operations | 2 | spring-bootstrap/lib/explyt-java-agent-0.1.jarspring-bootstrap/lib/jpa.jar | - |
| LOW | postinstall system command | 9 | spring-bootstrap/lib/sentry-8.29.0.jarspring-bootstrap/lib/json-schema-validator-1.5.2.jarspring-bootstrap/lib/explyt-java-agent-0.1.jar +6 more | - |
| LOW | postinstall file manipulation | 4 | spring-bootstrap/lib/explyt-java-agent-0.1.jarspring-bootstrap/lib/jpa.jarspring-bootstrap/lib/spring-core.jar +1 more | - |
| LOW | JavaDropper | 2 | spring-bootstrap/lib/jpa.jarspring-bootstrap/lib/spring-core.jar | - |
| LOW | postinstall obfuscation | 6 | spring-bootstrap/lib/validation-api-2.0.1.Final.jarspring-bootstrap/lib/json-schema-validator-1.5.2.jarspring-bootstrap/lib/snakeyaml-2.2.jar +3 more | - |
| LOW | postinstall network communication | 4 | spring-bootstrap/lib/explyt-java-agent-0.1.jarspring-bootstrap/lib/sentry-8.29.0.jarspring-bootstrap/lib/spring-core.jar +1 more | - |
| LOW | postinstall registry modification | 1 | spring-bootstrap/lib/spring-core.jar | - |
| LOW | PM Zip with js | 2 | spring-bootstrap/lib/spring-core.jarspring-bootstrap/lib/spring-web.jar | - |
| LOW | postinstall persistence mechanism | 5 | spring-bootstrap/lib/sentry-8.29.0.jarspring-bootstrap/lib/explyt-spring-boot-bean-reader-0.1.jarspring-bootstrap/lib/cron-utils-9.2.1.jar +2 more | - |
Publisher Evidence
LowExplyt
Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
12 evidence rows available.
Finding Categories
YARA Rules Matched
10 rules(39 hits)AI Security Report
AI Security Review
Evidence context: threat category none; evidence quality moderate.
The Spring Explyt extension has been analyzed, and the findings suggest that it is a legitimate development tool with broad access. The extension has multiple hash findings, including HASH-01a6a63e42409c5b and HASH-ef779af5d29a9dde, which are related to its dependencies, such as base-2026.1.jar and snakeyaml-2.4.jar. The filesystem and process access are justified by the extension's stated purpose as a development tool. There are no credential-access findings targeting actual secrets, and the strongest counterargument to the verdict is that the extension's dependencies may be outdated, but this does not change the conclusion that the extension is likely a false positive. The extension is from a verified publisher, Explyt Ltd, on the JetBrains marketplace, which adds to its legitimacy.
Key Reasons
- legitimate development tool functionality
- lack of malicious indicators
- verified publisher
False Positive Considerations
- bundled dependencies
- expected IDE behavior
Reviewed 2026-05-23; recommended action: no action; model confidence 80%.
JetBrains version history
Risk trend by version
10 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.
Pick any point on the chart to explore that version's code below.
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace