VS Code Marketplace

Python (PyDev)

by Fabio Zadrozny · 366.3K users · 3.3 rating
ade60d13-be80-5210-b5b3-2206823e935e | v0.16.0
94/ 100
CRITICAL risk
Risk verdict
Do not install

Score-based assessment (critical risk, 94/100). No analyst review available.

Analysis record

Analysed
2 weeks ago
Version
v0.16.0
Artifact
SHA256 AC8…E2B
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

1000 detail rows

YARA Rule Matches

15 rules
SeverityRuleHitsFilesMetadata
HIGHCAP HookExKeylogger 1
server/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stubs/pywin32/win32/lib/win32con.pyi
Brian C. Bell -- @biebsmalwareguy FP 5%
LOWpostinstall file download 187
server/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/pydevd_attach_to_process/common/py_utils.hppserver/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stdlib/sqlite3/__init__.pyiserver/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stubs/pysftp/pysftp/__init__.pyi +184 more
-
LOWNoUseWeakRandom 1
out/extension.js
-
LOWNoUseEval 30
server/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stdlib/tkinter/__init__.pyiserver/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stubs/lupa/lupa/luajit20.pyiserver/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/_pydev_bundle/_pydev_completer.py +27 more
-
LOWpostinstall process injection 5
server/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/pydevd_attach_to_process/winappdbg/thread.pyserver/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/pydevd_attach_to_process/winappdbg/win32/kernel32.pyserver/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/pydevd_attach_to_process/windows/inject_dll.cpp +2 more
-
LOWNoWriteOnDocumentContentFromRequest 1
server/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/_pydevd_bundle/_debug_adapter/__main__pydevd_gen_debug_adapter_protocol.py
-
LOWDebuggerStatementsShouldNotBeUsed 103
server/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/pydevd_attach_to_process/README.txtserver/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stubs/pywin32/win32comext/axdebug/debugger.pyiserver/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/pydevd_attach_to_process/linux_and_mac/lldb_prepare.py +100 more
-
LOWUsingCommandLineArguments 1
out/extension.js
-
LOWRedirectToUnknownPath 9
server/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/_pydev_runfiles/pydev_runfiles_unittest.pyserver/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/pydevd.pyserver/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/_pydevd_bundle/pydevd_io.py +6 more
-
LOWpostinstall persistence mechanism 78
server/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stubs/reportlab/reportlab/lib/randomtext.pyiserver/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stubs/pywin32/win32/win32api.pyiserver/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stubs/tensorflow/tensorflow/core/util/memmapped_file_system_pb2.pyi +75 more
-
LOWcredential env files 40
server/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/pydevd_file_utils.pyserver/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/pydevd_attach_to_process/winappdbg/interactive.pyserver/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/runfiles.py +37 more
-
LOWpostinstall environment access 238
server/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stubs/pywin32/win32/lib/win32inetcon.pyiserver/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stubs/aws-xray-sdk/aws_xray_sdk/core/recorder.pyiserver/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stdlib/multiprocessing/forkserver.pyi +235 more
-
LOWpostinstall obfuscation 176
server/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stdlib/encodings/idna.pyiserver/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stubs/docker/docker/auth.pyiserver/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stdlib/encodings/iso8859_10.pyi +173 more
-
LOWpostinstall registry modification 114
server/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stdlib/importlib/machinery.pyiserver/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stdlib/multiprocessing/forkserver.pyiserver/plugins/org.python.pydev.core_13.1.0.202509210817/typeshed/stubs/protobuf/google/protobuf/descriptor_pb2.pyi +111 more
-
LOWpostinstall file manipulation 1
server/plugins/org.python.pydev.core_13.1.0.202509210817/pysrc/_pydevd_frame_eval/vendored/bytecode/flags.py
-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

1,311 total
...

Network indicators are queued for lazy loading

Scroll this section into view to load the detailed rows.

Publisher Evidence

Limited evidence

Fabio Zadrozny

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

45
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Not exposed
Not exposed
Extension portfolio
2
Portfolio

13 evidence rows available.

Finding Categories

1
Malware Signatures
6
Obfuscation
1,311
IoC Indicators

YARA Rules Matched

15 rules(985 hits)
CAP HookExKeylogger postinstall file download NoUseWeakRandom NoUseEval postinstall process injection NoWriteOnDocumentContentFromRequest DebuggerStatementsShouldNotBeUsed UsingCommandLineArguments RedirectToUnknownPath postinstall persistence mechanism credential env files postinstall environment access postinstall obfuscation postinstall registry modification postinstall file manipulation

Security Analysis Summary

Security Analysis Overview

Python (PyDev) is a Visual Studio Code Marketplace extension published by Fabio Zadrozny. Version 0.16.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 94.39/100 (CRITICAL risk) based on 5186 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • Critical: 5 finding(s)
  • High: 1 finding(s)
  • Medium: 1312 finding(s)
  • Low: 3868 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Python (PyDev) is published by Fabio Zadrozny on the Visual Studio Code Marketplace marketplace. The extension has approximately 366K users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

About This Extension

Python with the PyDev Language Server (Linting, Intellisense, Code Formatting, Quick Fixes and more).

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Python Debugger (PyDev)

Fabio Zadrozny

MINIMAL 90K users

Profile Python with PyVmMonitor

Fabio Zadrozny

MINIMAL 17K users

Eclipse/PyDev Windows Keymap

Fabio Zadrozny

MINIMAL 9K users

Nakka - AI code agent

Nakka

CRITICAL 3 users

Erilang

eritten kwame gyau

CRITICAL 1 users

BOO UI编辑器

boo-best

CRITICAL 113 users