Is "react-style-classname-hint" on VS Code Marketplace Safe to Install?

lovely-shark · vscode · v1.0.1

一个编写 React 时享受到 className 智能提示的插件

Risk Assessment

Analyzed
100
out of 100
CRITICAL

18283 security findings detected across all analyzers

VS Code extension analyzed via package manifest and static code analysis

Severity Breakdown

0
Critical
985
High
17296
Medium
2
Low
0
Info

Finding Categories

38
Malware Signatures
950
Obfuscation
12
Network

YARA Rules Matched

17 rules(38 hits)
postinstall system command ServerHostnameNotVerified postinstall network communication postinstall file manipulation UsingCommandLineArguments NoUseEval postinstall obfuscation CreatingCookiesWithoutTheSecureFlag postinstall crypto operations NoUseWeakRandom postinstall persistence mechanism postinstall registry modification postinstall file download credential env files postinstall environment access credential vscode credentials +1 more

About This Extension

一个编写 React 时享受到 className 智能提示的插件

Detailed Findings

1000 total

YARA Rule Matches

17 rules

Security Analysis Summary

Security Analysis Overview

react-style-classname-hint is a Visual Studio Code Marketplace extension published by lovely-shark. Version 1.0.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 18283 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 985 finding(s)
  • Medium: 17296 finding(s)
  • Low: 2 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

react-style-classname-hint is published by lovely-shark on the Visual Studio Code Marketplace marketplace. The extension has approximately 751 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

EveryOps Extension

EveryOps-ai

CRITICAL 21 users

SayDeploy - Copilot Assistant

LunarWerx

CRITICAL 96 users

Code Guardian

DreamersRedemption

CRITICAL 43 users

Static analyzer for C/C++

FireStarter

CRITICAL 2K users

Claude Tower

Shahar Shavit

CRITICAL 13 users

Copilot MCP + Agent Skills Manager

Automata Labs

CRITICAL 92K users