Is Codex Translation Editor safe to use?

Codex Translation Editor has a security risk score of 100/100 (CRITICAL risk). Our security analysis detected 12320 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Codex Translation Editor?

Based on our automated security analysis, Codex Translation Editor presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "Codex Translation Editor" on OpenVSX Registry Safe to Install?

Name: Codex Translation Editor
Availability: InStock
Author: project-accelerate

Verified

project-accelerate · openvsx · v0.24.0

Support for `.codex` notebooks and translation source files. Includes Codex Language Server for translation drafting and checking diagnostics and features.

Risk Assessment

Analyzed

100

out of 100

CRITICAL

12320 security findings detected across all analyzers

Open VSX extension analyzed via package manifest and static code analysis

Severity Breakdown

Critical

722

High

10885

Medium

Low

Info

Finding Categories

680

Malware Signatures

102

Obfuscation

112

Network

106

IoC Indicators

YARA Rules Matched

23 rules(680 hits)

postinstall file manipulation postinstall file download postinstall network communication postinstall system command credential vscode credentials UsingShellInterpreterWhenExecutingOSCommands UsingCommandLineArguments NoUseEval credential git credentials postinstall obfuscation DebuggerStatementsShouldNotBeUsed postinstall registry modification postinstall persistence mechanism postinstall crypto operations OriginsNotVerified UntrustedContentShouldNotBeIncluded +7 more

About This Extension

Support for `.codex` notebooks and translation source files. Includes Codex Language Server for translation drafting and checking diagnostics and features.

Detailed Findings

894 total

YARA Rule Matches

23 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

106

IP Addresses

Strings

106

All Indicators · 106

URL

detected URL: https://registry.npmjs.org/commander/-/commander-9.5.0.tgz

XIOC detected URL: https://registry.npmjs.org/commander/-/commander-9.5.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz

XIOC detected URL: https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz

XIOC detected URL: https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/interpret/-/interpret-3.1.1.tgz

XIOC detected URL: https://registry.npmjs.org/interpret/-/interpret-3.1.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-date-object/-/is-date-object-1.1.0.tgz

XIOC detected URL: https://registry.npmjs.org/is-date-object/-/is-date-object-1.1.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-core-module/-/is-core-module-2.16.1.tgz

XIOC detected URL: https://registry.npmjs.org/is-core-module/-/is-core-module-2.16.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-callable/-/is-callable-1.2.7.tgz

XIOC detected URL: https://registry.npmjs.org/is-callable/-/is-callable-1.2.7.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz

XIOC detected URL: https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-boolean-object/-/is-boolean-object-1.2.2.tgz

XIOC detected URL: https://registry.npmjs.org/is-boolean-object/-/is-boolean-object-1.2.2.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz

XIOC detected URL: https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-bigint/-/is-bigint-1.1.0.tgz

XIOC detected URL: https://registry.npmjs.org/is-bigint/-/is-bigint-1.1.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-interactive/-/is-interactive-2.0.0.tgz

XIOC detected URL: https://registry.npmjs.org/is-interactive/-/is-interactive-2.0.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz

XIOC detected URL: https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-generator-function/-/is-generator-function-1.1.2.tgz

XIOC detected URL: https://registry.npmjs.org/is-generator-function/-/is-generator-function-1.1.2.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-function/-/is-function-1.0.2.tgz

XIOC detected URL: https://registry.npmjs.org/is-function/-/is-function-1.0.2.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz

XIOC detected URL: https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz

XIOC detected URL: https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz

XIOC detected URL: https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-regex/-/is-regex-1.2.1.tgz

XIOC detected URL: https://registry.npmjs.org/is-regex/-/is-regex-1.2.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz

XIOC detected URL: https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-1.1.0.tgz

XIOC detected URL: https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-1.1.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-number-object/-/is-number-object-1.1.1.tgz

XIOC detected URL: https://registry.npmjs.org/is-number-object/-/is-number-object-1.1.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz

XIOC detected URL: https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-nan/-/is-nan-1.3.2.tgz

XIOC detected URL: https://registry.npmjs.org/is-nan/-/is-nan-1.3.2.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-map/-/is-map-2.0.3.tgz

XIOC detected URL: https://registry.npmjs.org/is-map/-/is-map-2.0.3.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-unicode-supported/-/is-unicode-supported-1.3.0.tgz

XIOC detected URL: https://registry.npmjs.org/is-unicode-supported/-/is-unicode-supported-1.3.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.15.tgz

XIOC detected URL: https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.15.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-symbol/-/is-symbol-1.1.1.tgz

XIOC detected URL: https://registry.npmjs.org/is-symbol/-/is-symbol-1.1.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-string/-/is-string-1.1.1.tgz

XIOC detected URL: https://registry.npmjs.org/is-string/-/is-string-1.1.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-stream/-/is-stream-3.0.0.tgz

XIOC detected URL: https://registry.npmjs.org/is-stream/-/is-stream-3.0.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-shared-array-buffer/-/is-shared-array-buffer-1.0.4.tgz

XIOC detected URL: https://registry.npmjs.org/is-shared-array-buffer/-/is-shared-array-buffer-1.0.4.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-set/-/is-set-2.0.3.tgz

XIOC detected URL: https://registry.npmjs.org/is-set/-/is-set-2.0.3.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/isomorphic-fetch/-/isomorphic-fetch-3.0.0.tgz

XIOC detected URL: https://registry.npmjs.org/isomorphic-fetch/-/isomorphic-fetch-3.0.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz

XIOC detected URL: https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz

XIOC detected URL: https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/isarray/-/isarray-2.0.5.tgz

XIOC detected URL: https://registry.npmjs.org/isarray/-/isarray-2.0.5.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz

XIOC detected URL: https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-weakset/-/is-weakset-2.0.4.tgz

XIOC detected URL: https://registry.npmjs.org/is-weakset/-/is-weakset-2.0.4.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/is-weakmap/-/is-weakmap-2.0.2.tgz

XIOC detected URL: https://registry.npmjs.org/is-weakmap/-/is-weakmap-2.0.2.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/react-is/-/react-is-18.3.1.tgz

XIOC detected URL: https://registry.npmjs.org/react-is/-/react-is-18.3.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/pretty-format/-/pretty-format-29.7.0.tgz

XIOC detected URL: https://registry.npmjs.org/pretty-format/-/pretty-format-29.7.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/ansi-styles/-/ansi-styles-5.2.0.tgz

XIOC detected URL: https://registry.npmjs.org/ansi-styles/-/ansi-styles-5.2.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/jest-diff/-/jest-diff-29.7.0.tgz

XIOC detected URL: https://registry.npmjs.org/jest-diff/-/jest-diff-29.7.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/jake/-/jake-10.9.4.tgz

XIOC detected URL: https://registry.npmjs.org/jake/-/jake-10.9.4.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.3.tgz

XIOC detected URL: https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.3.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/isomorphic-git/-/isomorphic-git-1.36.1.tgz

XIOC detected URL: https://registry.npmjs.org/isomorphic-git/-/isomorphic-git-1.36.1.tgz

extracted_from_files

URL

detected URL: https://github.com/chalk/supports-color?sponsor=1

XIOC detected URL: https://github.com/chalk/supports-color?sponsor=1

extracted_from_files

URL

detected URL: https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz

XIOC detected URL: https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/jest-worker/-/jest-worker-27.5.1.tgz

XIOC detected URL: https://registry.npmjs.org/jest-worker/-/jest-worker-27.5.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/jest-util/-/jest-util-29.7.0.tgz

XIOC detected URL: https://registry.npmjs.org/jest-util/-/jest-util-29.7.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/jest-message-util/-/jest-message-util-29.7.0.tgz

XIOC detected URL: https://registry.npmjs.org/jest-message-util/-/jest-message-util-29.7.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/jest-matcher-utils/-/jest-matcher-utils-29.7.0.tgz

XIOC detected URL: https://registry.npmjs.org/jest-matcher-utils/-/jest-matcher-utils-29.7.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/jest-get-type/-/jest-get-type-29.6.3.tgz

XIOC detected URL: https://registry.npmjs.org/jest-get-type/-/jest-get-type-29.6.3.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz

XIOC detected URL: https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/jsesc/-/jsesc-3.1.0.tgz

XIOC detected URL: https://registry.npmjs.org/jsesc/-/jsesc-3.1.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz

XIOC detected URL: https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz

XIOC detected URL: https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/js-base64/-/js-base64-3.7.2.tgz

XIOC detected URL: https://registry.npmjs.org/js-base64/-/js-base64-3.7.2.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/jpeg-js/-/jpeg-js-0.4.4.tgz

XIOC detected URL: https://registry.npmjs.org/jpeg-js/-/jpeg-js-0.4.4.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/jimp/-/jimp-0.22.12.tgz

XIOC detected URL: https://registry.npmjs.org/jimp/-/jimp-0.22.12.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/jszip/-/jszip-3.10.1.tgz

XIOC detected URL: https://registry.npmjs.org/jszip/-/jszip-3.10.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/jsonschema/-/jsonschema-1.5.0.tgz

XIOC detected URL: https://registry.npmjs.org/jsonschema/-/jsonschema-1.5.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/json5/-/json5-2.2.3.tgz

XIOC detected URL: https://registry.npmjs.org/json5/-/json5-2.2.3.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz

XIOC detected URL: https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz

XIOC detected URL: https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/json-schema-ref-resolver/-/json-schema-ref-resolver-1.0.1.tgz

XIOC detected URL: https://registry.npmjs.org/json-schema-ref-resolver/-/json-schema-ref-resolver-1.0.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-3.0.2.tgz

XIOC detected URL: https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-3.0.2.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lie/-/lie-3.3.0.tgz

XIOC detected URL: https://registry.npmjs.org/lie/-/lie-3.3.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/levn/-/levn-0.4.1.tgz

XIOC detected URL: https://registry.npmjs.org/levn/-/levn-0.4.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lazystream/-/lazystream-1.0.1.tgz

XIOC detected URL: https://registry.npmjs.org/lazystream/-/lazystream-1.0.1.tgz

extracted_from_files

URL

detected URL: https://github.com/sindresorhus/ky?sponsor=1

XIOC detected URL: https://github.com/sindresorhus/ky?sponsor=1

extracted_from_files

URL

detected URL: https://registry.npmjs.org/ky/-/ky-0.33.3.tgz

XIOC detected URL: https://registry.npmjs.org/ky/-/ky-0.33.3.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz

XIOC detected URL: https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz

XIOC detected URL: https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz

extracted_from_files

URL

detected URL: https://github.com/hejny/locate-app/blob/main/README.md#%EF%B8%8F-contributing

XIOC detected URL: https://github.com/hejny/locate-app/blob/main/README.md#%EF%B8%8F-contributing

extracted_from_files

URL

detected URL: https://registry.npmjs.org/locate-app/-/locate-app-2.5.0.tgz

XIOC detected URL: https://registry.npmjs.org/locate-app/-/locate-app-2.5.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/loader-runner/-/loader-runner-4.3.1.tgz

XIOC detected URL: https://registry.npmjs.org/loader-runner/-/loader-runner-4.3.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/load-bmfont/-/load-bmfont-1.4.2.tgz

XIOC detected URL: https://registry.npmjs.org/load-bmfont/-/load-bmfont-1.4.2.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/listenercount/-/listenercount-1.0.1.tgz

XIOC detected URL: https://registry.npmjs.org/listenercount/-/listenercount-1.0.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-2.0.4.tgz

XIOC detected URL: https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-2.0.4.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/light-my-request/-/light-my-request-5.14.0.tgz

XIOC detected URL: https://registry.npmjs.org/light-my-request/-/light-my-request-5.14.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lodash.flatmap/-/lodash.flatmap-4.5.0.tgz

XIOC detected URL: https://registry.npmjs.org/lodash.flatmap/-/lodash.flatmap-4.5.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lodash.difference/-/lodash.difference-4.5.0.tgz

XIOC detected URL: https://registry.npmjs.org/lodash.difference/-/lodash.difference-4.5.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lodash.debounce/-/lodash.debounce-4.0.8.tgz

XIOC detected URL: https://registry.npmjs.org/lodash.debounce/-/lodash.debounce-4.0.8.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz

XIOC detected URL: https://registry.npmjs.org/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz

XIOC detected URL: https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz

XIOC detected URL: https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/type-fest/-/type-fest-4.26.0.tgz

XIOC detected URL: https://registry.npmjs.org/type-fest/-/type-fest-4.26.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lodash.takeright/-/lodash.takeright-4.1.1.tgz

XIOC detected URL: https://registry.npmjs.org/lodash.takeright/-/lodash.takeright-4.1.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lodash.take/-/lodash.take-4.1.1.tgz

XIOC detected URL: https://registry.npmjs.org/lodash.take/-/lodash.take-4.1.1.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lodash.pickby/-/lodash.pickby-4.6.0.tgz

XIOC detected URL: https://registry.npmjs.org/lodash.pickby/-/lodash.pickby-4.6.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz

XIOC detected URL: https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lodash.isfunction/-/lodash.isfunction-3.0.9.tgz

XIOC detected URL: https://registry.npmjs.org/lodash.isfunction/-/lodash.isfunction-3.0.9.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lodash.isequal/-/lodash.isequal-4.5.0.tgz

XIOC detected URL: https://registry.npmjs.org/lodash.isequal/-/lodash.isequal-4.5.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lodash.flattendeep/-/lodash.flattendeep-4.4.0.tgz

XIOC detected URL: https://registry.npmjs.org/lodash.flattendeep/-/lodash.flattendeep-4.4.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz

XIOC detected URL: https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/loglevel-plugin-prefix/-/loglevel-plugin-prefix-0.8.4.tgz

XIOC detected URL: https://registry.npmjs.org/loglevel-plugin-prefix/-/loglevel-plugin-prefix-0.8.4.tgz

extracted_from_files

URL

detected URL: https://tidelift.com/funding/github/npm/loglevel

XIOC detected URL: https://tidelift.com/funding/github/npm/loglevel

extracted_from_files

URL

detected URL: https://registry.npmjs.org/loglevel/-/loglevel-1.9.2.tgz

XIOC detected URL: https://registry.npmjs.org/loglevel/-/loglevel-1.9.2.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/log-symbols/-/log-symbols-4.1.0.tgz

XIOC detected URL: https://registry.npmjs.org/log-symbols/-/log-symbols-4.1.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lodash.union/-/lodash.union-4.6.0.tgz

XIOC detected URL: https://registry.npmjs.org/lodash.union/-/lodash.union-4.6.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lodash.truncate/-/lodash.truncate-4.4.2.tgz

XIOC detected URL: https://registry.npmjs.org/lodash.truncate/-/lodash.truncate-4.4.2.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/markdown-loader/-/markdown-loader-8.0.0.tgz

XIOC detected URL: https://registry.npmjs.org/markdown-loader/-/markdown-loader-8.0.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz

XIOC detected URL: https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz

XIOC detected URL: https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz

extracted_from_files

URL

detected URL: https://registry.npmjs.org/lz-string/-/lz-string-1.5.0.tgz

XIOC detected URL: https://registry.npmjs.org/lz-string/-/lz-string-1.5.0.tgz

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Codex Translation Editor is a OpenVSX Registry extension published by project-accelerate. Version 0.24.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 12320 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

High: 722 finding(s)
Medium: 10885 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Codex Translation Editor is published by project-accelerate on the OpenVSX Registry marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

codex-chat-and-comments

Codex Editor

CRITICAL 29 users

Codex Translation Editor test

Codex Editor

CRITICAL

translators-copilot

project-accelerate

CRITICAL 580 users

vscode-edit-table

project-accelerate

CRITICAL 2K users

Codex Project Manager

Codex Editor

CRITICAL 107 users

Python Installer

Codex Editor

HIGH 996 users

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

About This Extension

Detailed Findings

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

OBFUSCATION-unicode_heavy

NET-FETCH-extension/out/test/suite/1.index.js-12275

OBFUSCATION-fromcharcode_bulk

NET-FETCH-extension/out/327.extension.js-12274

NET-FETCH-extension/out/680.extension.js-12395

NET-FETCH-extension/out/3.extension.js-21764

NET-FETCH-extension/out/node_modules/fts5-sql-bundle/dist/sql-wasm.js-162

NET-FETCH-extension/out/1.extension.js-1590

NET-FETCH-extension/out/test/suite/index.js-31628

NET-XMLHTTPREQUEST-extension/out/1.extension.js-25694

NET-FETCH-extension/out/1.extension.js-12399

NET-FETCH-extension/out/test/suite/2.index.js-1591

NET-FETCH-extension/out/1.extension.js-12670

NET-FETCH-extension/out/3.extension.js-22834

OBFUSCATION-fromcharcode_bulk

OBFUSCATION-function_indirect

OBFUSCATION-fromcharcode_bulk

OBFUSCATION-fromcharcode_bulk

NET-FETCH-extension/out/2.extension.js-12341

NET-FETCH-extension/out/test/suite/2.index.js-12667

NET-FETCH-extension/out/test/suite/index.js-31434

NET-FETCH-extension/out/472.extension.js-16905

OBFUSCATION-fromcharcode_bulk

NET-FETCH-extension/out/680.extension.js-12270

NET-FETCH-extension/out/4.extension.js-10632

NET-FETCH-extension/out/test/suite/3.index.js-1596

NET-FETCH-extension/out/test/suite/1.index.js-11255

OBFUSCATION-function_indirect

OBFUSCATION-fromcharcode_bulk

NET-FETCH-extension/out/test/suite/4.index.js-9165

OBFUSCATION-fromcharcode_bulk

OBFUSCATION-fromcharcode_bulk

OBFUSCATION-fromcharcode_bulk