Is WakaTime safe to use?

WakaTime has a security risk score of 100/100 (CRITICAL risk). Our security analysis detected 250 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of WakaTime?

Based on our automated security analysis, WakaTime presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "WakaTime" on JetBrains Marketplace Safe to Install?

Name: WakaTime
Availability: InStock
Rating: 4.18 (0 reviews)
Author: WakaTime

Verified

WakaTime · jetbrains · v16.0.0

Metrics, insights, and time tracking automatically generated from your programming activity. Installation 1. Inside your IDE, select Preferences -> Plugins -&gt...

Risk Assessment

Analyzed

100

out of 100

CRITICAL

250 security findings detected across all analyzers

JetBrains plugin analyzed via plugin.xml configuration and static code analysis

Severity Breakdown

Critical

High

165

Medium

Low

Info

Finding Categories

Malware Signatures

163

IoC Indicators

YARA Rules Matched

8 rules(22 hits)

JavaDropper postinstall obfuscation postinstall file manipulation postinstall network communication postinstall file download postinstall registry modification postinstall system command postinstall persistence mechanism

Plugin Configuration

JetBrains plugins declare dependencies and extension points in plugin.xml. Plugins can register actions, services, and listeners that run within the IDE process.

JETBRAINS-MANIFEST-APPLICATION-COMPONENT-com.wakatime.intellij.plugin.WakaTime

JETBRAINS-MANIFEST-ACTION-pluginMenu

About This Extension

Metrics, insights, and time tracking automatically generated from your programming activity. Installation 1. Inside your IDE, select Preferences -> Plugins -&gt...

Detailed Findings

85 total

YARA Rule Matches

8 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

IP Addresses

Domains

108

Strings

163

All Indicators · 163

Domain

detected Domain: customeditormouselistener.java

XIOC detected Domain: customeditormouselistener.java

extracted_from_files

Domain

detected Domain: p.ec

XIOC detected Domain: p.ec

extracted_from_files

URL

detected URL: https://wakatime.com

XIOC detected URL: https://wakatime.com

extracted_from_files

detected IP: ::e

XIOC detected IP: ::e

extracted_from_files

Domain

detected Domain: y.de

XIOC detected Domain: y.de

extracted_from_files

Domain

detected Domain: ꩡ.eg

XIOC detected Domain: ꩡ.eg

extracted_from_files

Domain

detected Domain: h.et

XIOC detected Domain: h.et

extracted_from_files

detected IP: a::8

XIOC detected IP: a::8

extracted_from_files

detected IP: ::67

XIOC detected IP: ::67

extracted_from_files

URL

detected URL: https://wakatime.com/)

XIOC detected URL: https://wakatime.com/)

extracted_from_files

URL

detected URL: https://api.wakatime.com

XIOC detected URL: https://api.wakatime.com

extracted_from_files

URL

detected URL: https://ctags.io/

XIOC detected URL: https://ctags.io/

extracted_from_files

URL

detected URL: https://wakatime.com/rider

XIOC detected URL: https://wakatime.com/rider

extracted_from_files

URL

detected URL: https://wakatime.com/rubymine

XIOC detected URL: https://wakatime.com/rubymine

extracted_from_files

URL

detected URL: https://wakatime.com/webstorm

XIOC detected URL: https://wakatime.com/webstorm

extracted_from_files

URL

detected URL: https://wakatime.com/api-key

XIOC detected URL: https://wakatime.com/api-key

extracted_from_files

URL

detected URL: https://wakatime.com/dashboard

XIOC detected URL: https://wakatime.com/dashboard

extracted_from_files

URL

detected URL: https://api.wakatime.com/api/v1/cli-missing?osname=

XIOC detected URL: https://api.wakatime.com/api/v1/cli-missing?osname=

extracted_from_files

URL

detected URL: https://api.github.com/repos/wakatime/wakatime-cli/releases/latest

XIOC detected URL: https://api.github.com/repos/wakatime/wakatime-cli/releases/latest

extracted_from_files

URL

detected URL: https://wakatime.com/android-studio

XIOC detected URL: https://wakatime.com/android-studio

extracted_from_files

URL

detected URL: https://wakatime.com/appcode

XIOC detected URL: https://wakatime.com/appcode

extracted_from_files

URL

detected URL: https://wakatime.com/clion

XIOC detected URL: https://wakatime.com/clion

extracted_from_files

URL

detected URL: https://wakatime.com/datagrip

XIOC detected URL: https://wakatime.com/datagrip

extracted_from_files

URL

detected URL: https://wakatime.com/goland

XIOC detected URL: https://wakatime.com/goland

extracted_from_files

URL

detected URL: https://wakatime.com/phpstorm

XIOC detected URL: https://wakatime.com/phpstorm

extracted_from_files

URL

detected URL: https://wakatime.com/pycharm

XIOC detected URL: https://wakatime.com/pycharm

extracted_from_files

URL

detected URL: https://github.com/wakatime/wakatime-cli/blob/develop/USAGE.md)

XIOC detected URL: https://github.com/wakatime/wakatime-cli/blob/develop/USAGE.md)

extracted_from_files

URL

detected URL: https://wakatime.com/static/img/ScreenShots/jetbrains-no-proxy-setting.png?v=1)

XIOC detected URL: https://wakatime.com/static/img/ScreenShots/jetbrains-no-proxy-setting.png?v=1)

extracted_from_files

URL

detected URL: https://wakatime.com/static/img/ScreenShots/jetbrains-wakatime-menu.png?v=1)

XIOC detected URL: https://wakatime.com/static/img/ScreenShots/jetbrains-wakatime-menu.png?v=1)

extracted_from_files

URL

detected URL: https://intellij-support.jetbrains.com/hc/en-us/articles/207241085-Locating-IDE-log-files)

XIOC detected URL: https://intellij-support.jetbrains.com/hc/en-us/articles/207241085-Locating-IDE-log-files)

extracted_from_files

URL

detected URL: https://github.com/wakatime/wakatime-cli/blob/develop/TROUBLESHOOTING.md).

XIOC detected URL: https://github.com/wakatime/wakatime-cli/blob/develop/TROUBLESHOOTING.md).

extracted_from_files

URL

detected URL: https://wakatime.com/

XIOC detected URL: https://wakatime.com/

extracted_from_files

URL

detected URL: https://wakatime.com/intellij-idea

XIOC detected URL: https://wakatime.com/intellij-idea

extracted_from_files

URL

detected URL: http://confluence.jetbrains.com/display/IDEADEV/Plugin+Compatibility+with+IntelliJ+Platform+Products

XIOC detected URL: http://confluence.jetbrains.com/display/IDEADEV/Plugin+Compatibility+with+IntelliJ+Platform+Products

extracted_from_files

URL

detected URL: https://img.shields.io/jetbrains/plugin/v/7425-wakatime.svg?style=flat-square&color=167dff&label=marketplace)](https://plugins.jetbrains.com/plugin/7425-wakatime)

XIOC detected URL: https://img.shields.io/jetbrains/plugin/v/7425-wakatime.svg?style=flat-square&color=167dff&label=marketplace)](https://plugins.jetbrains.com/plugin/7425-wakatime)

extracted_from_files

URL

detected URL: https://img.shields.io/jetbrains/plugin/d/7425-wakatime.svg?style=flat-square&color=167dff)](https://plugins.jetbrains.com/plugin/7425-wakatime)

XIOC detected URL: https://img.shields.io/jetbrains/plugin/d/7425-wakatime.svg?style=flat-square&color=167dff)](https://plugins.jetbrains.com/plugin/7425-wakatime)

extracted_from_files

URL

detected URL: https://wakatime.com/badge/github/wakatime/jetbrains-wakatime.svg?style=flat-square&color=167dff)](https://wakatime.com/intellij-idea)

XIOC detected URL: https://wakatime.com/badge/github/wakatime/jetbrains-wakatime.svg?style=flat-square&color=167dff)](https://wakatime.com/intellij-idea)

extracted_from_files

URL

detected URL: https://wakatime.com/settings#apikey)

XIOC detected URL: https://wakatime.com/settings#apikey)

extracted_from_files

URL

detected URL: https://wakatime.com).

XIOC detected URL: https://wakatime.com).

extracted_from_files

URL

detected URL: https://wakatime.com/static/img/ScreenShots/Screen-Shot-2016-03-21.png)

XIOC detected URL: https://wakatime.com/static/img/ScreenShots/Screen-Shot-2016-03-21.png)

extracted_from_files

Domain

detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

URL

detected URL: https://github.com/wakatime/jetbrains-wakatime/blob/master/HISTORY.rst

XIOC detected URL: https://github.com/wakatime/jetbrains-wakatime/blob/master/HISTORY.rst

extracted_from_files

URL

detected URL: http://confluence.jetbrains.com/display/IDEADEV/Build+Number+Ranges

XIOC detected URL: http://confluence.jetbrains.com/display/IDEADEV/Build+Number+Ranges

extracted_from_files

detected IP: c::

XIOC detected IP: c::

extracted_from_files

detected IP: ::a

XIOC detected IP: ::a

extracted_from_files

Domain

detected Domain: wakatime-cli.s3-us-west-2.amazonaws.com

XIOC detected Domain: wakatime-cli.s3-us-west-2.amazonaws.com

extracted_from_files

Other