Is "QiMa-Assistant - ChatGPT4.0" on VS Code Marketplace Safe to Install?

zhoujun261 · vscode · v0.0.26

????,??chatGPT??,??apiKey,???,?????

Risk Assessment

Analyzed
51.17
out of 100
MEDIUM

381 security findings detected across all analyzers

VS Code extension analyzed via package manifest and static code analysis

Severity Breakdown

0
Critical
42
High
323
Medium
16
Low
0
Info

Finding Categories

42
Malware Signatures
320
IoC Indicators

YARA Rules Matched

12 rules(42 hits)
credential env files postinstall obfuscation postinstall file manipulation postinstall network communication postinstall system command NoUseWeakRandom postinstall crypto operations DebuggerStatementsShouldNotBeUsed SQLInjection postinstall file download postinstall registry modification postinstall persistence mechanism

About This Extension

????,??chatGPT??,??apiKey,???,?????

Detailed Findings

58 total

YARA Rule Matches

12 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
47
IP Addresses
10
Domains
263
Strings
320

All Indicators · 320

Domain
detected Domain: this.processor.plugins.map

XIOC detected Domain: this.processor.plugins.map

extracted_from_files

Domain
detected Domain: u.call

XIOC detected Domain: u.call

extracted_from_files

Domain
detected Domain: y.hr

XIOC detected Domain: y.hr

extracted_from_files

URL
detected URL: https://beta.openai.com/docs/api-reference/completions/create#completions/create-temperature)

XIOC detected URL: https://beta.openai.com/docs/api-reference/completions/create#completions/create-temperature)

extracted_from_files

IP
detected IP: ::0

XIOC detected IP: ::0

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

IP
detected IP: ea::

XIOC detected IP: ea::

extracted_from_files

IP
detected IP: 3::

XIOC detected IP: 3::

extracted_from_files

IP
detected IP: c::

XIOC detected IP: c::

extracted_from_files

IP
detected IP: ::f

XIOC detected IP: ::f

extracted_from_files

IP
detected IP: 2::

XIOC detected IP: 2::

extracted_from_files

Domain
detected Domain: 3.co

XIOC detected Domain: 3.co

extracted_from_files

Domain
detected Domain: rv.pf

XIOC detected Domain: rv.pf

extracted_from_files

Domain
detected Domain: cdn.daikuan.360.cn

XIOC detected Domain: cdn.daikuan.360.cn

extracted_from_files

Domain
detected Domain: keepachangelog.com

XIOC detected Domain: keepachangelog.com

extracted_from_files

Domain
detected Domain: schemas.openxmlformats.org

XIOC detected Domain: schemas.openxmlformats.org

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

IP
detected IP: ::bac

XIOC detected IP: ::bac

extracted_from_files

Domain
detected Domain: ޱ.al

XIOC detected Domain: ޱ.al

extracted_from_files

Domain
detected Domain: d.ng

XIOC detected Domain: d.ng

extracted_from_files

Domain
detected Domain: 6.tv

XIOC detected Domain: 6.tv

extracted_from_files

Domain
detected Domain: ԑ.wf

XIOC detected Domain: ԑ.wf

extracted_from_files

Domain
detected Domain: m.sm

XIOC detected Domain: m.sm

extracted_from_files

Domain
detected Domain: 0.cg

XIOC detected Domain: 0.cg

extracted_from_files

Domain
detected Domain: m.ma

XIOC detected Domain: m.ma

extracted_from_files

Domain
detected Domain: n.pk

XIOC detected Domain: n.pk

extracted_from_files

Domain
detected Domain: c.sd

XIOC detected Domain: c.sd

extracted_from_files

Domain
detected Domain: zlȇ.hm

XIOC detected Domain: zlȇ.hm

extracted_from_files

Domain
detected Domain: l.pr

XIOC detected Domain: l.pr

extracted_from_files

Domain
detected Domain: er.es

XIOC detected Domain: er.es

extracted_from_files

Domain
detected Domain: 8.al

XIOC detected Domain: 8.al

extracted_from_files

Domain
detected Domain: s.na

XIOC detected Domain: s.na

extracted_from_files

Domain
detected Domain: ƅ.la

XIOC detected Domain: ƅ.la

extracted_from_files

Domain
detected Domain: e.sr

XIOC detected Domain: e.sr

extracted_from_files

Domain
detected Domain: ߆.aq

XIOC detected Domain: ߆.aq

extracted_from_files

Domain
detected Domain: 2ؼ.ck

XIOC detected Domain: 2ؼ.ck

extracted_from_files

Domain
detected Domain: 8.lc

XIOC detected Domain: 8.lc

extracted_from_files

Domain
detected Domain: 0s.gb

XIOC detected Domain: 0s.gb

extracted_from_files

Domain
detected Domain: w.mr

XIOC detected Domain: w.mr

extracted_from_files

Domain
detected Domain: ds.er

XIOC detected Domain: ds.er

extracted_from_files

Domain
detected Domain: dun.gr

XIOC detected Domain: dun.gr

extracted_from_files

Domain
detected Domain: d-.ug

XIOC detected Domain: d-.ug

extracted_from_files

Domain
detected Domain: m.gr

XIOC detected Domain: m.gr

extracted_from_files

Domain
detected Domain: ġ.si

XIOC detected Domain: ġ.si

extracted_from_files

Domain
detected Domain: gr.gs

XIOC detected Domain: gr.gs

extracted_from_files

Domain
detected Domain: u.tv

XIOC detected Domain: u.tv

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: message.id

XIOC detected Domain: message.id

extracted_from_files

Domain
detected Domain: event.data

XIOC detected Domain: event.data

extracted_from_files

Domain
detected Domain: ns.adobe.com

XIOC detected Domain: ns.adobe.com

extracted_from_files

URL
detected Domain: purl.org

XIOC detected Domain: purl.org

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: this.regexes.map

XIOC detected Domain: this.regexes.map

extracted_from_files

Domain
detected Domain: e.case

XIOC detected Domain: e.case

extracted_from_files

Domain
detected Domain: n.data

XIOC detected Domain: n.data

extracted_from_files

Domain
detected Domain: e.map

XIOC detected Domain: e.map

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: this.data

XIOC detected Domain: this.data

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: month.abb

XIOC detected Domain: month.abb

extracted_from_files

Domain
detected Domain: e.re

XIOC detected Domain: e.re

extracted_from_files

Domain
detected Domain: i.name

XIOC detected Domain: i.name

extracted_from_files

Domain
detected Domain: w.case

XIOC detected Domain: w.case

extracted_from_files

Domain
detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain
detected Domain: e.variants.map

XIOC detected Domain: e.variants.map

extracted_from_files

Domain
detected Domain: r.contains.map

XIOC detected Domain: r.contains.map

extracted_from_files

Domain
detected Domain: marked.js.org

XIOC detected Domain: marked.js.org

extracted_from_files

Domain
detected Domain: seq.int

XIOC detected Domain: seq.int

extracted_from_files

Domain
detected Domain: is.name

XIOC detected Domain: is.name

extracted_from_files

Domain
detected Domain: is.na

XIOC detected Domain: is.na

extracted_from_files

Domain
detected Domain: is.call

XIOC detected Domain: is.call

extracted_from_files

Domain
detected Domain: as.call

XIOC detected Domain: as.call

extracted_from_files

Domain
detected Domain: month.name

XIOC detected Domain: month.name

extracted_from_files

Domain
detected Domain: t.space

XIOC detected Domain: t.space

extracted_from_files

Domain
detected Domain: advanced.md

XIOC detected Domain: advanced.md

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain
detected Domain: e.constructor.name

XIOC detected Domain: e.constructor.name

extracted_from_files

Domain
detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

Domain
detected Domain: a.map

XIOC detected Domain: a.map

extracted_from_files

Domain
detected Domain: e.nodes.map

XIOC detected Domain: e.nodes.map

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: t.br

XIOC detected Domain: t.br

extracted_from_files

Domain
detected Domain: t.link

XIOC detected Domain: t.link

extracted_from_files

Domain
detected Domain: a.search

XIOC detected Domain: a.search

extracted_from_files

Domain
detected Domain: o.search

XIOC detected Domain: o.search

extracted_from_files

Domain
detected Domain: this.lexer.state.top

XIOC detected Domain: this.lexer.state.top

extracted_from_files

Domain
detected Domain: t.hr

XIOC detected Domain: t.hr

extracted_from_files

Domain
detected Domain: this.tokenizer.link

XIOC detected Domain: this.tokenizer.link

extracted_from_files

Domain
detected Domain: this.state.top

XIOC detected Domain: this.state.top

extracted_from_files

Domain
detected Domain: this.tokenizer.hr

XIOC detected Domain: this.tokenizer.hr

extracted_from_files

Domain
detected Domain: this.tokenizer.space

XIOC detected Domain: this.tokenizer.space

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: v.br

XIOC detected Domain: v.br

extracted_from_files

Domain
detected Domain: v.link

XIOC detected Domain: v.link

extracted_from_files

Domain
detected Domain: evilmartians.com

XIOC detected Domain: evilmartians.com

extracted_from_files

Domain
detected Domain: tailwindcss.com

XIOC detected Domain: tailwindcss.com

extracted_from_files

Domain
detected Domain: l.call

XIOC detected Domain: l.call

extracted_from_files

Domain
detected Domain: s.walktokens.call

XIOC detected Domain: s.walktokens.call

extracted_from_files

Domain
detected Domain: r.name

XIOC detected Domain: r.name

extracted_from_files

Domain
detected Domain: this.renderer.hr

XIOC detected Domain: this.renderer.hr

extracted_from_files

Domain
detected Domain: this.tokenizer.br

XIOC detected Domain: this.tokenizer.br

extracted_from_files

Domain
detected Domain: r.orange

XIOC detected Domain: r.orange

extracted_from_files

Domain
detected Domain: r.red

XIOC detected Domain: r.red

extracted_from_files

Domain
detected Domain: r.black

XIOC detected Domain: r.black

extracted_from_files

Domain
detected Domain: rw.call

XIOC detected Domain: rw.call

extracted_from_files

Domain
detected Domain: mths.be

XIOC detected Domain: mths.be

extracted_from_files

Domain
detected Domain: twitter.com

XIOC detected Domain: twitter.com

extracted_from_files

Domain
detected Domain: www.w3ctech.com

XIOC detected Domain: www.w3ctech.com

extracted_from_files

Domain
detected Domain: r.map

XIOC detected Domain: r.map

extracted_from_files

Domain
detected Domain: this.sky

XIOC detected Domain: this.sky

extracted_from_files

Domain
detected Domain: colors.blue

XIOC detected Domain: colors.blue

extracted_from_files

Domain
detected Domain: r.pink

XIOC detected Domain: r.pink

extracted_from_files

Domain
detected Domain: r.blue

XIOC detected Domain: r.blue

extracted_from_files

Domain
detected Domain: r.sky

XIOC detected Domain: r.sky

extracted_from_files

Domain
detected Domain: r.green

XIOC detected Domain: r.green

extracted_from_files

Domain
detected Domain: t.at

XIOC detected Domain: t.at

extracted_from_files

Domain
detected Domain: r.call

XIOC detected Domain: r.call

extracted_from_files

Domain
detected Domain: r.constructor.name

XIOC detected Domain: r.constructor.name

extracted_from_files

Domain
detected Domain: u.id

XIOC detected Domain: u.id

extracted_from_files

Domain
detected Domain: this.parent.at

XIOC detected Domain: this.parent.at

extracted_from_files

Domain
detected Domain: e.next

XIOC detected Domain: e.next

extracted_from_files

Domain
detected Domain: s.map

XIOC detected Domain: s.map

extracted_from_files

Domain
detected Domain: gb.id

XIOC detected Domain: gb.id

extracted_from_files

Domain
detected Domain: r.prototype.valuetostring.call

XIOC detected Domain: r.prototype.valuetostring.call

extracted_from_files

Domain
detected Domain: eb.call

XIOC detected Domain: eb.call

extracted_from_files

Domain
detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain
detected Domain: this.nodes.map

XIOC detected Domain: this.nodes.map

extracted_from_files

Domain
detected Domain: be.id

XIOC detected Domain: be.id

extracted_from_files

Domain
detected Domain: this.at

XIOC detected Domain: this.at

extracted_from_files

Domain
detected Domain: p.plus

XIOC detected Domain: p.plus

extracted_from_files

Domain
detected Domain: p.space

XIOC detected Domain: p.space

extracted_from_files

Domain
detected Domain: p.cr

XIOC detected Domain: p.cr

extracted_from_files

Domain
detected Domain: p.tab

XIOC detected Domain: p.tab

extracted_from_files

Domain
detected Domain: bi.no

XIOC detected Domain: bi.no

extracted_from_files

Domain
detected Domain: e.no

XIOC detected Domain: e.no

extracted_from_files

Domain
detected Domain: n.smart

XIOC detected Domain: n.smart

extracted_from_files

Domain
detected Domain: e.space

XIOC detected Domain: e.space

extracted_from_files

Domain
detected Domain: r.safe

XIOC detected Domain: r.safe

extracted_from_files

Domain
detected Domain: o.plus

XIOC detected Domain: o.plus

extracted_from_files

Domain
detected Domain: o.space

XIOC detected Domain: o.space

extracted_from_files

Domain
detected Domain: o.cr

XIOC detected Domain: o.cr

extracted_from_files

Domain
detected Domain: o.tab

XIOC detected Domain: o.tab

extracted_from_files

Domain
detected Domain: p.at

XIOC detected Domain: p.at

extracted_from_files

Domain
detected Domain: w.id

XIOC detected Domain: w.id

extracted_from_files

Domain
detected Domain: this.space

XIOC detected Domain: this.space

extracted_from_files

Domain
detected Domain: w.space

XIOC detected Domain: w.space

extracted_from_files

Domain
detected Domain: d.space

XIOC detected Domain: d.space

extracted_from_files

Domain
detected Domain: this.options.safe

XIOC detected Domain: this.options.safe

extracted_from_files

Domain
detected Domain: e.tab

XIOC detected Domain: e.tab

extracted_from_files

Domain
detected Domain: e.cr

XIOC detected Domain: e.cr

extracted_from_files

Domain
detected Domain: t.fast

XIOC detected Domain: t.fast

extracted_from_files

Domain
detected Domain: o.map

XIOC detected Domain: o.map

extracted_from_files

Domain
detected Domain: n.map

XIOC detected Domain: n.map

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: ea.exports.my

XIOC detected Domain: ea.exports.my

extracted_from_files

Domain
detected Domain: i.map

XIOC detected Domain: i.map

extracted_from_files

Domain
detected Domain: q.id

XIOC detected Domain: q.id

extracted_from_files

Domain
detected Domain: this.result.root.nodes.map

XIOC detected Domain: this.result.root.nodes.map

extracted_from_files

Domain
detected Domain: this.result.map

XIOC detected Domain: this.result.map

extracted_from_files

Domain
detected Domain: fe.daikuan.qihoo.net

XIOC detected Domain: fe.daikuan.qihoo.net

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

URL
detected URL: https://beta.openai.com/docs/api-reference/completions/create#completions/create-max_tokens)

XIOC detected URL: https://beta.openai.com/docs/api-reference/completions/create#completions/create-max_tokens)

extracted_from_files

URL
detected URL: https://beta.openai.com/docs/api-reference/completions/create#completions/create-top_p)

XIOC detected URL: https://beta.openai.com/docs/api-reference/completions/create#completions/create-top_p)

extracted_from_files

URL
detected URL: http://schemas.microsoft.com/developer/vsx-schema/2011

XIOC detected URL: http://schemas.microsoft.com/developer/vsx-schema/2011

extracted_from_files

Domain
detected Domain: p.name

XIOC detected Domain: p.name

extracted_from_files

Domain
detected Domain: w.next

XIOC detected Domain: w.next

extracted_from_files

Domain
detected Domain: r.next

XIOC detected Domain: r.next

extracted_from_files

Domain
detected Domain: c.name

XIOC detected Domain: c.name

extracted_from_files

Domain
detected Domain: o.name

XIOC detected Domain: o.name

extracted_from_files

Domain
detected Domain: r.nodes.map

XIOC detected Domain: r.nodes.map

extracted_from_files

Domain
detected Domain: t.events

XIOC detected Domain: t.events

extracted_from_files

Domain
detected Domain: s.selectors.map

XIOC detected Domain: s.selectors.map

extracted_from_files

Domain
detected Domain: container.center

XIOC detected Domain: container.center

extracted_from_files

Domain
detected Domain: i.values.map

XIOC detected Domain: i.values.map

extracted_from_files

Domain
detected Domain: b.name

XIOC detected Domain: b.name

extracted_from_files

Domain
detected Domain: x.name

XIOC detected Domain: x.name

extracted_from_files

Domain
detected Domain: n.name

XIOC detected Domain: n.name

extracted_from_files

Domain
detected Domain: e.values.map

XIOC detected Domain: e.values.map

extracted_from_files

Domain
detected Domain: this.compare

XIOC detected Domain: this.compare

extracted_from_files

Domain
detected Domain: n.id

XIOC detected Domain: n.id

extracted_from_files

Domain
detected Domain: i.id

XIOC detected Domain: i.id

extracted_from_files

Domain
detected Domain: e.selectors.map

XIOC detected Domain: e.selectors.map

extracted_from_files

Domain
detected Domain: r.parent.name

XIOC detected Domain: r.parent.name

extracted_from_files

Domain
detected Domain: u.map

XIOC detected Domain: u.map

extracted_from_files

Domain
detected Domain: e.host

XIOC detected Domain: e.host

extracted_from_files

Domain
detected Domain: d.map

XIOC detected Domain: d.map

extracted_from_files

Domain
detected Domain: f.name

XIOC detected Domain: f.name

extracted_from_files

Domain
detected Domain: re.name

XIOC detected Domain: re.name

extracted_from_files

Domain
detected Domain: pe.selectors.map

XIOC detected Domain: pe.selectors.map

extracted_from_files

Domain
detected Domain: p.map

XIOC detected Domain: p.map

extracted_from_files

Domain
detected Domain: r.tailwindconfig.plugins.map

XIOC detected Domain: r.tailwindconfig.plugins.map

extracted_from_files

Domain
detected Domain: n.search

XIOC detected Domain: n.search

extracted_from_files

Domain
detected Domain: n.nodes.map

XIOC detected Domain: n.nodes.map

extracted_from_files

Domain
detected Domain: f.map

XIOC detected Domain: f.map

extracted_from_files

Domain
detected Domain: u.parent.name

XIOC detected Domain: u.parent.name

extracted_from_files

Domain
detected Domain: k.nodes.map

XIOC detected Domain: k.nodes.map

extracted_from_files

Domain
detected Domain: d.name

XIOC detected Domain: d.name

extracted_from_files

Domain
detected Domain: o.negative.map

XIOC detected Domain: o.negative.map

extracted_from_files

Domain
detected Domain: o.positive.map

XIOC detected Domain: o.positive.map

extracted_from_files

Domain
detected Domain: this.all.browsers.data

XIOC detected Domain: this.all.browsers.data

extracted_from_files

Domain
detected Domain: this.prefixes.group

XIOC detected Domain: this.prefixes.group

extracted_from_files

Domain
detected Domain: w2.save

XIOC detected Domain: w2.save

extracted_from_files

Domain
detected Domain: this.prefixes.add.selectors.map

XIOC detected Domain: this.prefixes.add.selectors.map

extracted_from_files

Domain
detected Domain: this.all.group

XIOC detected Domain: this.all.group

extracted_from_files

Domain
detected Domain: e.names.map

XIOC detected Domain: e.names.map

extracted_from_files

Domain
detected Domain: s.name

XIOC detected Domain: s.name

extracted_from_files

Domain
detected Domain: this.select

XIOC detected Domain: this.select

extracted_from_files

Domain
detected Domain: dximagetransform.microsoft

XIOC detected Domain: dximagetransform.microsoft

extracted_from_files

Domain
detected Domain: fm.space

XIOC detected Domain: fm.space

extracted_from_files

Domain
detected Domain: this.prefixes.map

XIOC detected Domain: this.prefixes.map

extracted_from_files

Domain
detected Domain: a.name

XIOC detected Domain: a.name

extracted_from_files

Domain
detected Domain: ic.save

XIOC detected Domain: ic.save

extracted_from_files

Domain
detected Domain: this.all.data

XIOC detected Domain: this.all.data

extracted_from_files

Domain
detected Domain: cdn.tailwindcss.com

XIOC detected Domain: cdn.tailwindcss.com

extracted_from_files

Domain
detected Domain: kt.info

XIOC detected Domain: kt.info

extracted_from_files

Domain
detected Domain: kt.data

XIOC detected Domain: kt.data

extracted_from_files

Domain
detected Domain: el.red

XIOC detected Domain: el.red

extracted_from_files

Domain
detected Domain: prefixes.you

XIOC detected Domain: prefixes.you

extracted_from_files

Domain
detected Domain: n.browsers.map

XIOC detected Domain: n.browsers.map

extracted_from_files

Domain
detected Domain: this.browsers.data

XIOC detected Domain: this.browsers.data

extracted_from_files

Domain
detected Domain: filter.call

XIOC detected Domain: filter.call

extracted_from_files

Domain
detected Domain: options.hr

XIOC detected Domain: options.hr

extracted_from_files

Domain
detected Domain: array.prototype.indexof.call

XIOC detected Domain: array.prototype.indexof.call

extracted_from_files

Domain
detected Domain: options.br

XIOC detected Domain: options.br

extracted_from_files

Domain
detected Domain: gmail.com

XIOC detected Domain: gmail.com

extracted_from_files

Domain
detected Domain: gist.github.com

XIOC detected Domain: gist.github.com

extracted_from_files

Domain
detected Domain: unpkg.com

XIOC detected Domain: unpkg.com

extracted_from_files

Domain
detected Domain: replacementfornode.call

XIOC detected Domain: replacementfornode.call

extracted_from_files

Domain
detected Domain: reduce.call

XIOC detected Domain: reduce.call

extracted_from_files

Domain
detected Domain: postprocess.call

XIOC detected Domain: postprocess.call

extracted_from_files

Domain
detected Domain: process.call

XIOC detected Domain: process.call

extracted_from_files

Domain
detected Domain: doc.open

XIOC detected Domain: doc.open

extracted_from_files

Domain
detected Domain: node.data

XIOC detected Domain: node.data

extracted_from_files

Domain
detected Domain: prevtext.data

XIOC detected Domain: prevtext.data

extracted_from_files

URL
detected Domain: this.url.host

XIOC detected Domain: this.url.host

extracted_from_files

Domain
detected Domain: p.host

XIOC detected Domain: p.host

extracted_from_files

Domain
detected Domain: m.map

XIOC detected Domain: m.map

extracted_from_files

Domain
detected Domain: p.search

XIOC detected Domain: p.search

extracted_from_files

Hash
detected MD5 Hash: ff7a32eec9f39cb36ef24010eb994fb5

XIOC detected MD5 Hash: ff7a32eec9f39cb36ef24010eb994fb5

extracted_from_files

Hash
detected MD5 Hash: beef184c87a918f39a4fb91d6c476119

XIOC detected MD5 Hash: beef184c87a918f39a4fb91d6c476119

extracted_from_files

URL
detected URL: http://schemas.microsoft.com/developer/vsx-schema-design/2011

XIOC detected URL: http://schemas.microsoft.com/developer/vsx-schema-design/2011

extracted_from_files

Domain
detected Domain: e.stream

XIOC detected Domain: e.stream

extracted_from_files

Domain
detected Domain: o1.call

XIOC detected Domain: o1.call

extracted_from_files

Domain
detected Domain: b.prototype.name

XIOC detected Domain: b.prototype.name

extracted_from_files

Domain
detected Domain: error.call

XIOC detected Domain: error.call

extracted_from_files

Domain
detected Domain: h1.exports.is

XIOC detected Domain: h1.exports.is

extracted_from_files

URL
detected Domain: url.host

XIOC detected Domain: url.host

extracted_from_files

Domain
detected Domain: this.base.host

XIOC detected Domain: this.base.host

extracted_from_files

Domain
detected Domain: w1.prototype.name

XIOC detected Domain: w1.prototype.name

extracted_from_files

Domain
detected Domain: p.call

XIOC detected Domain: p.call

extracted_from_files

Domain
detected Domain: p.target

XIOC detected Domain: p.target

extracted_from_files

Domain
detected Domain: a.stream

XIOC detected Domain: a.stream

extracted_from_files

Domain
detected Domain: p.stream

XIOC detected Domain: p.stream

extracted_from_files

Domain
detected Domain: p.constructor.name

XIOC detected Domain: p.constructor.name

extracted_from_files

Domain
detected Domain: l.name

XIOC detected Domain: l.name

extracted_from_files

Domain
detected Domain: e.read

XIOC detected Domain: e.read

extracted_from_files

Domain
detected Domain: m.cleartimeout.call

XIOC detected Domain: m.cleartimeout.call

extracted_from_files

Domain
detected Domain: m.settimeout.call

XIOC detected Domain: m.settimeout.call

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: this.opts.store

XIOC detected Domain: this.opts.store

extracted_from_files

Domain
detected Domain: object.hasownproperty.call

XIOC detected Domain: object.hasownproperty.call

extracted_from_files

Domain
detected Domain: p1.call

XIOC detected Domain: p1.call

extracted_from_files

Domain
detected Domain: gpt3.top

XIOC detected Domain: gpt3.top

extracted_from_files

Domain
detected Domain: p.id

XIOC detected Domain: p.id

extracted_from_files

Domain
detected Domain: o.delta

XIOC detected Domain: o.delta

extracted_from_files

Domain
detected Domain: o.id

XIOC detected Domain: o.id

extracted_from_files

Domain
detected Domain: api.openai.com

XIOC detected Domain: api.openai.com

extracted_from_files

Domain
detected Domain: t.read

XIOC detected Domain: t.read

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Domain
detected Domain: changelog.md

XIOC detected Domain: changelog.md

extracted_from_files

Domain
detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

Domain
detected Domain: schemas.microsoft.com

XIOC detected Domain: schemas.microsoft.com

extracted_from_files

Domain
detected Domain: chatgpt.gpt3.top

XIOC detected Domain: chatgpt.gpt3.top

extracted_from_files

Domain
detected Domain: openai.gravesmeta.com

XIOC detected Domain: openai.gravesmeta.com

extracted_from_files

Domain
detected Domain: beta.openai.com

XIOC detected Domain: beta.openai.com

extracted_from_files

URL
detected URL: http://ns.adobe.com/xap/1.0/

XIOC detected URL: http://ns.adobe.com/xap/1.0/

extracted_from_files

URL
detected URL: http://purl.org/dc/elements/1.1/'

XIOC detected URL: http://purl.org/dc/elements/1.1/'

extracted_from_files

URL
detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#'

XIOC detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#'

extracted_from_files

URL
detected URL: https://cdn.daikuan.360.cn/pic/ff7a32eec9f39cb36ef24010eb994fb5.gif

XIOC detected URL: https://cdn.daikuan.360.cn/pic/ff7a32eec9f39cb36ef24010eb994fb5.gif

extracted_from_files

URL
detected URL: https://cdn.daikuan.360.cn/pic/beef184c87a918f39a4fb91d6c476119.gif

XIOC detected URL: https://cdn.daikuan.360.cn/pic/beef184c87a918f39a4fb91d6c476119.gif

extracted_from_files

URL
detected URL: http://keepachangelog.com/)

XIOC detected URL: http://keepachangelog.com/)

extracted_from_files

URL
detected URL: http://schemas.openxmlformats.org/package/2006/content-types

XIOC detected URL: http://schemas.openxmlformats.org/package/2006/content-types

extracted_from_files

URL
detected URL: https://github.com/markedjs/marked.

XIOC detected URL: https://github.com/markedjs/marked.

extracted_from_files

URL
detected URL: http://

XIOC detected URL: http://

extracted_from_files

URL
detected URL: https://marked.js.org/#/USING_ADVANCED.md#options

XIOC detected URL: https://marked.js.org/#/USING_ADVANCED.md#options

extracted_from_files

URL
detected URL: https://github.com/markedjs/marked

XIOC detected URL: https://github.com/markedjs/marked

extracted_from_files

URL
detected URL: https://github.com/highlightjs/highlight.js/wiki/security

XIOC detected URL: https://github.com/highlightjs/highlight.js/wiki/security

extracted_from_files

URL
detected URL: https://github.com/highlightjs/highlight.js/issues/2277

XIOC detected URL: https://github.com/highlightjs/highlight.js/issues/2277

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

URL
detected URL: https://tailwindcss.com/docs/upgrade-guide#remove-dark-mode-configuration

XIOC detected URL: https://tailwindcss.com/docs/upgrade-guide#remove-dark-mode-configuration

extracted_from_files

URL
detected URL: https://www.w3ctech.com/topic/2226

XIOC detected URL: https://www.w3ctech.com/topic/2226

extracted_from_files

URL
detected URL: https://evilmartians.com/chronicles/postcss-8-plugin-migration

XIOC detected URL: https://evilmartians.com/chronicles/postcss-8-plugin-migration

extracted_from_files

URL
detected URL: https://tailwindcss.com/docs/upgrade-guide#prefix-cannot-be-a-function

XIOC detected URL: https://tailwindcss.com/docs/upgrade-guide#prefix-cannot-be-a-function

extracted_from_files

URL
detected URL: https://tailwindcss.com/docs/content-configuration#discarding-classes

XIOC detected URL: https://tailwindcss.com/docs/content-configuration#discarding-classes

extracted_from_files

URL
detected URL: https://tailwindcss.com/docs/upgrade-guide#configure-content-sources

XIOC detected URL: https://tailwindcss.com/docs/upgrade-guide#configure-content-sources

extracted_from_files

URL
detected URL: https://tailwindcss.com/docs/configuration#prefix

XIOC detected URL: https://tailwindcss.com/docs/configuration#prefix

extracted_from_files

URL
detected URL: https://tailwindcss.com/docs/content-configuration

XIOC detected URL: https://tailwindcss.com/docs/content-configuration

extracted_from_files

URL
detected URL: https://tailwindcss.com/docs/upgrade-guide#replace-variants-with-layer

XIOC detected URL: https://tailwindcss.com/docs/upgrade-guide#replace-variants-with-layer

extracted_from_files

URL
detected URL: https://tailwindcss.com/docs/content-configuration#safelisting-classes

XIOC detected URL: https://tailwindcss.com/docs/content-configuration#safelisting-classes

extracted_from_files

URL
detected URL: https://tailwindcss.com

XIOC detected URL: https://tailwindcss.com

extracted_from_files

URL
detected URL: https://mths.be/cssesc

XIOC detected URL: https://mths.be/cssesc

extracted_from_files

URL
detected URL: https://tailwindcss.com/docs/installation

XIOC detected URL: https://tailwindcss.com/docs/installation

extracted_from_files

URL
detected URL: https://github.com/postcss/autoprefixer#readme

XIOC detected URL: https://github.com/postcss/autoprefixer#readme

extracted_from_files

URL
detected URL: https://twitter.com/browserslist

XIOC detected URL: https://twitter.com/browserslist

extracted_from_files

URL
detected URL: https://github.com/browserslist/browserslist#readme

XIOC detected URL: https://github.com/browserslist/browserslist#readme

extracted_from_files

URL
detected URL: https://tailwindcss.com/docs/using-with-preprocessors#nesting

XIOC detected URL: https://tailwindcss.com/docs/using-with-preprocessors#nesting

extracted_from_files

URL
detected URL: https://tailwindcss.com/docs/configuration#selector-strategy

XIOC detected URL: https://tailwindcss.com/docs/configuration#selector-strategy

extracted_from_files

URL
detected URL: http://openai.gravesmeta.com

XIOC detected URL: http://openai.gravesmeta.com

extracted_from_files

URL
detected URL: http://fe.daikuan.qihoo.net/service/api/qima/uploadQa

XIOC detected URL: http://fe.daikuan.qihoo.net/service/api/qima/uploadQa

extracted_from_files

URL
detected URL: https://api.openai.com

XIOC detected URL: https://api.openai.com

extracted_from_files

URL
detected URL: https://github.com/bitinn/node-fetch)

XIOC detected URL: https://github.com/bitinn/node-fetch)

extracted_from_files

URL
detected URL: https://gist.github.com/1129031

XIOC detected URL: https://gist.github.com/1129031

extracted_from_files

URL
detected URL: https://unpkg.com/[email protected]/dist/turndown.js

XIOC detected URL: https://unpkg.com/[email protected]/dist/turndown.js

extracted_from_files

URL
detected URL: https://github.com/mixmark-io/turndown

XIOC detected URL: https://github.com/mixmark-io/turndown

extracted_from_files

Domain
detected Domain: d.date

XIOC detected Domain: d.date

extracted_from_files

Domain
detected Domain: k2.call

XIOC detected Domain: k2.call

extracted_from_files

Domain
detected Domain: n.call

XIOC detected Domain: n.call

extracted_from_files

Domain
detected Domain: this.id

XIOC detected Domain: this.id

extracted_from_files

Security Analysis Summary

Security Analysis Overview

QiMa-Assistant - ChatGPT4.0 is a Visual Studio Code Marketplace extension published by zhoujun261. Version 0.0.26 has been analyzed by the Risky Plugins security platform, receiving a risk score of 51.17/100 (MEDIUM risk) based on 381 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • High: 42 finding(s)
  • Medium: 323 finding(s)
  • Low: 16 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

QiMa-Assistant - ChatGPT4.0 is published by zhoujun261 on the Visual Studio Code Marketplace marketplace. The extension has approximately 1K users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Frequently Asked Questions