Is "Fresh File Explorer" on VS Code Marketplace Safe to Install?

Frederik Hudák · vscode · v1.5.0

Easily navigate recent changes based on your pending work and Git history.

Risk Assessment

Analyzed
84.95
out of 100
HIGH

393 security findings detected across all analyzers

VS Code extension analyzed via package manifest and static code analysis

Severity Breakdown

0
Critical
0
High
272
Medium
121
Low
0
Info

Finding Categories

271
IoC Indicators

YARA Rules Matched

11 rules(121 hits)
postinstall file manipulation postinstall crypto operations NoUseWeakRandom postinstall system command postinstall file download postinstall network communication credential env files postinstall obfuscation postinstall persistence mechanism UsingShellInterpreterWhenExecutingOSCommands postinstall registry modification

About This Extension

Easily navigate recent changes based on your pending work and Git history.

Detailed Findings

121 total

YARA Rule Matches

11 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
36
IP Addresses
16
Domains
223
Strings
271

All Indicators · 271

Domain
detected Domain: gitloglpanel.js.map

XIOC detected Domain: gitloglpanel.js.map

extracted_from_files

IP
detected IP: 9::

XIOC detected IP: 9::

extracted_from_files

IP
detected IP: 0::

XIOC detected IP: 0::

extracted_from_files

Domain
detected Domain: 7.mit

XIOC detected Domain: 7.mit

extracted_from_files

Domain
detected Domain: g.gn

XIOC detected Domain: g.gn

extracted_from_files

Domain
detected Domain: h.md

XIOC detected Domain: h.md

extracted_from_files

Domain
detected Domain: b.kr

XIOC detected Domain: b.kr

extracted_from_files

Domain
detected Domain: va.truepic.com

XIOC detected Domain: va.truepic.com

extracted_from_files

Domain
detected Domain: c2pa.hash.data

XIOC detected Domain: c2pa.hash.data

extracted_from_files

IP
detected Domain: cv.iptc.org

XIOC detected Domain: cv.iptc.org

extracted_from_files

Domain
detected Domain: plx.th

XIOC detected Domain: plx.th

extracted_from_files

Domain
detected Domain: 瞊.lr

XIOC detected Domain: 瞊.lr

extracted_from_files

Domain
detected Domain: b.je

XIOC detected Domain: b.je

extracted_from_files

Domain
detected Domain: u.be

XIOC detected Domain: u.be

extracted_from_files

Domain
detected Domain: w.ro

XIOC detected Domain: w.ro

extracted_from_files

Domain
detected Domain: m.cy

XIOC detected Domain: m.cy

extracted_from_files

Domain
detected Domain: û.sz

XIOC detected Domain: û.sz

extracted_from_files

Domain
detected Domain: 2.sb

XIOC detected Domain: 2.sb

extracted_from_files

Domain
detected Domain: dx.gt

XIOC detected Domain: dx.gt

extracted_from_files

Domain
detected Domain: r.jo

XIOC detected Domain: r.jo

extracted_from_files

Domain
detected Domain: 1.uy

XIOC detected Domain: 1.uy

extracted_from_files

Domain
detected Domain: u.om

XIOC detected Domain: u.om

extracted_from_files

Domain
detected Domain: p0.eg

XIOC detected Domain: p0.eg

extracted_from_files

Domain
detected Domain: lo.hk

XIOC detected Domain: lo.hk

extracted_from_files

Domain
detected Domain: c.ru

XIOC detected Domain: c.ru

extracted_from_files

Domain
detected Domain: f.cy

XIOC detected Domain: f.cy

extracted_from_files

Domain
detected Domain: er.es

XIOC detected Domain: er.es

extracted_from_files

Domain
detected Domain: k.sa

XIOC detected Domain: k.sa

extracted_from_files

Domain
detected Domain: w.al

XIOC detected Domain: w.al

extracted_from_files

Domain
detected Domain: u.kn

XIOC detected Domain: u.kn

extracted_from_files

Domain
detected Domain: t.nu

XIOC detected Domain: t.nu

extracted_from_files

Domain
detected Domain: wg.wow

XIOC detected Domain: wg.wow

extracted_from_files

Domain
detected Domain: v.ie

XIOC detected Domain: v.ie

extracted_from_files

Domain
detected Domain: r.bs

XIOC detected Domain: r.bs

extracted_from_files

Domain
detected Domain: v.vu

XIOC detected Domain: v.vu

extracted_from_files

Domain
detected Domain: 2.br

XIOC detected Domain: 2.br

extracted_from_files

Domain
detected Domain: i.so

XIOC detected Domain: i.so

extracted_from_files

Domain
detected Domain: 2.sl

XIOC detected Domain: 2.sl

extracted_from_files

Domain
detected Domain: commit.author

XIOC detected Domain: commit.author

extracted_from_files

Domain
detected Domain: commit.date

XIOC detected Domain: commit.date

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: repodiv.id

XIOC detected Domain: repodiv.id

extracted_from_files

Domain
detected Domain: patterninput.select

XIOC detected Domain: patterninput.select

extracted_from_files

Domain
detected Domain: event.data

XIOC detected Domain: event.data

extracted_from_files

Domain
detected Domain: a.tn

XIOC detected Domain: a.tn

extracted_from_files

Domain
detected Domain: benchmark.js.map

XIOC detected Domain: benchmark.js.map

extracted_from_files

Domain
detected Domain: errorcol.name

XIOC detected Domain: errorcol.name

extracted_from_files

Domain
detected Domain: col.name

XIOC detected Domain: col.name

extracted_from_files

Domain
detected Domain: bm.name

XIOC detected Domain: bm.name

extracted_from_files

Domain
detected Domain: input.id

XIOC detected Domain: input.id

extracted_from_files

Domain
detected Domain: param.name

XIOC detected Domain: param.name

extracted_from_files

Domain
detected Domain: b.name

XIOC detected Domain: b.name

extracted_from_files

Domain
detected Domain: benchmark.run

XIOC detected Domain: benchmark.run

extracted_from_files

Domain
detected Domain: inputsets.map

XIOC detected Domain: inputsets.map

extracted_from_files

Domain
detected Domain: p.name

XIOC detected Domain: p.name

extracted_from_files

IP
detected Domain: multiparams.map

XIOC detected Domain: multiparams.map

extracted_from_files

Domain
detected Domain: benchmarks.map

XIOC detected Domain: benchmarks.map

extracted_from_files

Domain
detected Domain: vscode.viewcolumn.one

XIOC detected Domain: vscode.viewcolumn.one

extracted_from_files

Domain
detected Domain: values.map

XIOC detected Domain: values.map

extracted_from_files

Domain
detected Domain: quickpick.show

XIOC detected Domain: quickpick.show

extracted_from_files

Domain
detected Domain: codetelescopeintegration.js.map

XIOC detected Domain: codetelescopeintegration.js.map

extracted_from_files

Domain
detected Domain: o.author

XIOC detected Domain: o.author

extracted_from_files

Domain
detected Domain: perfbenchmarkpanelui.js.map

XIOC detected Domain: perfbenchmarkpanelui.js.map

extracted_from_files

Domain
detected Domain: perfbenchmarkpanel.js.map

XIOC detected Domain: perfbenchmarkpanel.js.map

extracted_from_files

Domain
detected Domain: repo.name

XIOC detected Domain: repo.name

extracted_from_files

Domain
detected Domain: repos.map

XIOC detected Domain: repos.map

extracted_from_files

Domain
detected Domain: basiccommands.js.map

XIOC detected Domain: basiccommands.js.map

extracted_from_files

Domain
detected Domain: vscode.configurationtarget.global

XIOC detected Domain: vscode.configurationtarget.global

extracted_from_files

Domain
detected Domain: filenames.map

XIOC detected Domain: filenames.map

extracted_from_files

IP
detected IP: ::a

XIOC detected IP: ::a

extracted_from_files

Domain
detected Domain: targets.map

XIOC detected Domain: targets.map

extracted_from_files

Domain
detected Domain: sortoptions.map

XIOC detected Domain: sortoptions.map

extracted_from_files

Domain
detected Domain: options.map

XIOC detected Domain: options.map

extracted_from_files

Domain
detected Domain: copypasteservice.js.map

XIOC detected Domain: copypasteservice.js.map

extracted_from_files

Domain
detected Domain: copypastecommands.js.map

XIOC detected Domain: copypastecommands.js.map

extracted_from_files

IP
detected Domain: clipboard.uris.map

XIOC detected Domain: clipboard.uris.map

extracted_from_files

Domain
detected Domain: items.map

XIOC detected Domain: items.map

extracted_from_files

Domain
detected Domain: commandconstants.js.map

XIOC detected Domain: commandconstants.js.map

extracted_from_files

Domain
detected Domain: codetelescopecommand.js.map

XIOC detected Domain: codetelescopecommand.js.map

extracted_from_files

Domain
detected Domain: metadata.author

XIOC detected Domain: metadata.author

extracted_from_files

Domain
detected Domain: vscode.open

XIOC detected Domain: vscode.open

extracted_from_files

URL
detected Domain: copyremoteurlcommand.js.map

XIOC detected Domain: copyremoteurlcommand.js.map

extracted_from_files

Domain
detected Domain: ssh.dev.azure.com

XIOC detected Domain: ssh.dev.azure.com

extracted_from_files

Domain
detected Domain: dev.azure.com

XIOC detected Domain: dev.azure.com

extracted_from_files

Domain
detected Domain: org.visualstudio.com

XIOC detected Domain: org.visualstudio.com

extracted_from_files

Domain
detected Domain: copypathcommands.js.map

XIOC detected Domain: copypathcommands.js.map

extracted_from_files

Domain
detected Domain: allitems.map

XIOC detected Domain: allitems.map

extracted_from_files

Domain
detected Domain: uris.map

XIOC detected Domain: uris.map

extracted_from_files

Domain
detected Domain: discardchangescommand.js.map

XIOC detected Domain: discardchangescommand.js.map

extracted_from_files

Domain
detected Domain: stageditems.map

XIOC detected Domain: stageditems.map

extracted_from_files

Domain
detected Domain: pendingitems.map

XIOC detected Domain: pendingitems.map

extracted_from_files

Domain
detected Domain: diffsearchcommand.js.map

XIOC detected Domain: diffsearchcommand.js.map

extracted_from_files

Domain
detected Domain: deletedfilecommands.js.map

XIOC detected Domain: deletedfilecommands.js.map

extracted_from_files

Domain
detected Domain: deleteditems.map

XIOC detected Domain: deleteditems.map

extracted_from_files

Domain
detected Domain: i.author

XIOC detected Domain: i.author

extracted_from_files

Domain
detected Domain: selected.map

XIOC detected Domain: selected.map

extracted_from_files

Domain
detected Domain: filecreationcommand.js.map

XIOC detected Domain: filecreationcommand.js.map

extracted_from_files

Domain
detected Domain: dragdropcontroller.js.map

XIOC detected Domain: dragdropcontroller.js.map

extracted_from_files

Domain
detected Domain: target.id

XIOC detected Domain: target.id

extracted_from_files

Domain
detected Domain: constructor.name

XIOC detected Domain: constructor.name

extracted_from_files

Domain
detected Domain: item.id

XIOC detected Domain: item.id

extracted_from_files

Domain
detected Domain: openchangescommand.js.map

XIOC detected Domain: openchangescommand.js.map

extracted_from_files

Domain
detected Domain: notecommands.js.map

XIOC detected Domain: notecommands.js.map

extracted_from_files

Domain
detected Domain: gitloglcommand.js.map

XIOC detected Domain: gitloglcommand.js.map

extracted_from_files

Domain
detected Domain: filtercommands.js.map

XIOC detected Domain: filtercommands.js.map

extracted_from_files

Domain
detected Domain: commits.map

XIOC detected Domain: commits.map

extracted_from_files

Domain
detected Domain: a.author

XIOC detected Domain: a.author

extracted_from_files

Domain
detected Domain: authors.map

XIOC detected Domain: authors.map

extracted_from_files

Domain
detected Domain: filedata.map

XIOC detected Domain: filedata.map

extracted_from_files

Domain
detected Domain: filteredquickpick.show

XIOC detected Domain: filteredquickpick.show

extracted_from_files

Domain
detected Domain: filteredfiles.map

XIOC detected Domain: filteredfiles.map

extracted_from_files

Domain
detected Domain: pincommands.js.map

XIOC detected Domain: pincommands.js.map

extracted_from_files

Domain
detected Domain: pinnedfiles.map

XIOC detected Domain: pinnedfiles.map

extracted_from_files

Domain
detected Domain: pathspeccommand.js.map

XIOC detected Domain: pathspeccommand.js.map

extracted_from_files

Domain
detected Domain: opencommitcommand.js.map

XIOC detected Domain: opencommitcommand.js.map

extracted_from_files

Domain
detected Domain: viewoptionscommand.js.map

XIOC detected Domain: viewoptionscommand.js.map

extracted_from_files

Domain
detected Domain: searchcommand.js.map

XIOC detected Domain: searchcommand.js.map

extracted_from_files

Domain
detected Domain: filepaths.map

XIOC detected Domain: filepaths.map

extracted_from_files

Domain
detected Domain: folder.name

XIOC detected Domain: folder.name

extracted_from_files

Domain
detected Domain: relativepaths.map

XIOC detected Domain: relativepaths.map

extracted_from_files

Domain
detected Domain: quickpickcommand.js.map

XIOC detected Domain: quickpickcommand.js.map

extracted_from_files

Domain
detected Domain: mainquickpick.show

XIOC detected Domain: mainquickpick.show

extracted_from_files

Domain
detected Domain: actualrepos.map

XIOC detected Domain: actualrepos.map

extracted_from_files

Domain
detected Domain: configservice.js.map

XIOC detected Domain: configservice.js.map

extracted_from_files

IP
detected IP: ::9

XIOC detected IP: ::9

extracted_from_files

Domain
detected Domain: 1.configkeys.search

XIOC detected Domain: 1.configkeys.search

extracted_from_files

Domain
detected Domain: schemas.openxmlformats.org

XIOC detected Domain: schemas.openxmlformats.org

extracted_from_files

Domain
detected Domain: 1.configkeys.auto

XIOC detected Domain: 1.configkeys.auto

extracted_from_files

Domain
detected Domain: configkeyconstants.js.map

XIOC detected Domain: configkeyconstants.js.map

extracted_from_files

Domain
detected Domain: matches.map

XIOC detected Domain: matches.map

extracted_from_files

Domain
detected Domain: ondidchangetreedata.fire

XIOC detected Domain: ondidchangetreedata.fire

extracted_from_files

Domain
detected Domain: diffsearchparser.js.map

XIOC detected Domain: diffsearchparser.js.map

extracted_from_files

Domain
detected Domain: diffsearchpanelui.js.map

XIOC detected Domain: diffsearchpanelui.js.map

extracted_from_files

Domain
detected Domain: status.info

XIOC detected Domain: status.info

extracted_from_files

Domain
detected Domain: diffsearchpanel.js.map

XIOC detected Domain: diffsearchpanel.js.map

extracted_from_files

Domain
detected Domain: r.name

XIOC detected Domain: r.name

extracted_from_files

Domain
detected Domain: logger.js.map

XIOC detected Domain: logger.js.map

extracted_from_files

Domain
detected Domain: contextmanager.js.map

XIOC detected Domain: contextmanager.js.map

extracted_from_files

Domain
detected Domain: diffsearchtreeitems.js.map

XIOC detected Domain: diffsearchtreeitems.js.map

extracted_from_files

Domain
detected Domain: 1.commands.open

XIOC detected Domain: 1.commands.open

extracted_from_files

Domain
detected Domain: this.id

XIOC detected Domain: this.id

extracted_from_files

Domain
detected Domain: diffsearchresultprovider.js.map

XIOC detected Domain: diffsearchresultprovider.js.map

extracted_from_files

Domain
detected Domain: pendingmatches.map

XIOC detected Domain: pendingmatches.map

extracted_from_files

Domain
detected Domain: metadata.date

XIOC detected Domain: metadata.date

extracted_from_files

Domain
detected Domain: datacollector.js.map

XIOC detected Domain: datacollector.js.map

extracted_from_files

Domain
detected Domain: extension.js.map

XIOC detected Domain: extension.js.map

extracted_from_files

Domain
detected Domain: 1.commands.pin

XIOC detected Domain: 1.commands.pin

extracted_from_files

Domain
detected Domain: 1.commands.show

XIOC detected Domain: 1.commands.show

extracted_from_files

Domain
detected Domain: 1.commands.search

XIOC detected Domain: 1.commands.search

extracted_from_files

Domain
detected Domain: workspacestatemanager.js.map

XIOC detected Domain: workspacestatemanager.js.map

extracted_from_files

Domain
detected Domain: this.syncwarnings.map

XIOC detected Domain: this.syncwarnings.map

extracted_from_files

Domain
detected Domain: element.id

XIOC detected Domain: element.id

extracted_from_files

Domain
detected Domain: this.historicaltimewindows.map

XIOC detected Domain: this.historicaltimewindows.map

extracted_from_files

Domain
detected Domain: folders.map

XIOC detected Domain: folders.map

extracted_from_files

Domain
detected Domain: freshfileitemsorter.js.map

XIOC detected Domain: freshfileitemsorter.js.map

extracted_from_files

Domain
detected Domain: freshfilefiltermanager.js.map

XIOC detected Domain: freshfilefiltermanager.js.map

extracted_from_files

Domain
detected Domain: fileindex.js.map

XIOC detected Domain: fileindex.js.map

extracted_from_files

Domain
detected Domain: groupingmode.js.map

XIOC detected Domain: groupingmode.js.map

extracted_from_files

Domain
detected Domain: freshfiletreeitems.js.map

XIOC detected Domain: freshfiletreeitems.js.map

extracted_from_files

Domain
detected Domain: 1.treeitemcontextvalues.author

XIOC detected Domain: 1.treeitemcontextvalues.author

extracted_from_files

Domain
detected Domain: freshfileprovider.js.map

XIOC detected Domain: freshfileprovider.js.map

extracted_from_files

Domain
detected Domain: m.date

XIOC detected Domain: m.date

extracted_from_files

Domain
detected Domain: historicalwindows.map

XIOC detected Domain: historicalwindows.map

extracted_from_files

Domain
detected Domain: repoitem.id

XIOC detected Domain: repoitem.id

extracted_from_files

Domain
detected Domain: groupingviewbuilder.js.map

XIOC detected Domain: groupingviewbuilder.js.map

extracted_from_files

Domain
detected Domain: b.metadata.author

XIOC detected Domain: b.metadata.author

extracted_from_files

Domain
detected Domain: a.metadata.author

XIOC detected Domain: a.metadata.author

extracted_from_files

Domain
detected Domain: moonphaseinfo.name

XIOC detected Domain: moonphaseinfo.name

extracted_from_files

Domain
detected Domain: firstfile.metadata.date

XIOC detected Domain: firstfile.metadata.date

extracted_from_files

Domain
detected Domain: firstfile.metadata.author

XIOC detected Domain: firstfile.metadata.author

extracted_from_files

Domain
detected Domain: item.metadata.date

XIOC detected Domain: item.metadata.date

extracted_from_files

Domain
detected Domain: pinneditemsmanager.js.map

XIOC detected Domain: pinneditemsmanager.js.map

extracted_from_files

Domain
detected Domain: this.pinneditems.map

XIOC detected Domain: this.pinneditems.map

extracted_from_files

Domain
detected Domain: item.data

XIOC detected Domain: item.data

extracted_from_files

Domain
detected Domain: newfiles.map

XIOC detected Domain: newfiles.map

extracted_from_files

Domain
detected Domain: moonphase.js.map

XIOC detected Domain: moonphase.js.map

extracted_from_files

Domain
detected Domain: historicalfilecache.js.map

XIOC detected Domain: historicalfilecache.js.map

extracted_from_files

Domain
detected Domain: entry.data

XIOC detected Domain: entry.data

extracted_from_files

Domain
detected Domain: head.name

XIOC detected Domain: head.name

extracted_from_files

Domain
detected Domain: treeitemconstants.js.map

XIOC detected Domain: treeitemconstants.js.map

extracted_from_files

Domain
detected Domain: timewindowutils.js.map

XIOC detected Domain: timewindowutils.js.map

extracted_from_files

Domain
detected Domain: planetaryretrograde.js.map

XIOC detected Domain: planetaryretrograde.js.map

extracted_from_files

Domain
detected Domain: pinneditemsprovider.js.map

XIOC detected Domain: pinneditemsprovider.js.map

extracted_from_files

Domain
detected Domain: pinneditem.data

XIOC detected Domain: pinneditem.data

extracted_from_files

Domain
detected Domain: pinneditem.id

XIOC detected Domain: pinneditem.id

extracted_from_files

Domain
detected Domain: user.name

XIOC detected Domain: user.name

extracted_from_files

Domain
detected Domain: entry.name

XIOC detected Domain: entry.name

extracted_from_files

Domain
detected Domain: gitloglparser.js.map

XIOC detected Domain: gitloglparser.js.map

extracted_from_files

Domain
detected Domain: gitexecutionlistener.js.map

XIOC detected Domain: gitexecutionlistener.js.map

extracted_from_files

Domain
detected Domain: basebranch.upstream.name

XIOC detected Domain: basebranch.upstream.name

extracted_from_files

Domain
detected Domain: basebranch.name

XIOC detected Domain: basebranch.name

extracted_from_files

Domain
detected Domain: head.upstream.name

XIOC detected Domain: head.upstream.name

extracted_from_files

Domain
detected Domain: heatmapdecorationprovider.js.map

XIOC detected Domain: heatmapdecorationprovider.js.map

extracted_from_files

Domain
detected Domain: ondidchangefiledecorations.fire

XIOC detected Domain: ondidchangefiledecorations.fire

extracted_from_files

Domain
detected Domain: gitoperations.js.map

XIOC detected Domain: gitoperations.js.map

extracted_from_files

Domain
detected Domain: filestatusentries.map

XIOC detected Domain: filestatusentries.map

extracted_from_files

Domain
detected Domain: statusinfo.commit.author

XIOC detected Domain: statusinfo.commit.author

extracted_from_files

Domain
detected Domain: statusinfo.commit.date

XIOC detected Domain: statusinfo.commit.date

extracted_from_files

Domain
detected Domain: entries.map

XIOC detected Domain: entries.map

extracted_from_files

Domain
detected Domain: collectionutils.js.map

XIOC detected Domain: collectionutils.js.map

extracted_from_files

Domain
detected Domain: types.js.map

XIOC detected Domain: types.js.map

extracted_from_files

IP
detected IP: a::

XIOC detected IP: a::

extracted_from_files

Domain
detected Domain: pathtypes.js.map

XIOC detected Domain: pathtypes.js.map

extracted_from_files

Domain
detected Domain: gitloglpanelui.js.map

XIOC detected Domain: gitloglpanelui.js.map

extracted_from_files

Domain
detected Domain: c.author

XIOC detected Domain: c.author

extracted_from_files

Domain
detected Domain: heatmaputils.js.map

XIOC detected Domain: heatmaputils.js.map

extracted_from_files

Domain
detected Domain: quickpick.js.map

XIOC detected Domain: quickpick.js.map

extracted_from_files

Domain
detected Domain: timewindows.map

XIOC detected Domain: timewindows.map

extracted_from_files

Domain
detected Domain: patternutils.js.map

XIOC detected Domain: patternutils.js.map

extracted_from_files

Domain
detected Domain: pathutils.js.map

XIOC detected Domain: pathutils.js.map

extracted_from_files

Domain
detected Domain: absolutepaths.map

XIOC detected Domain: absolutepaths.map

extracted_from_files

Domain
detected Domain: formatutils.js.map

XIOC detected Domain: formatutils.js.map

extracted_from_files

Domain
detected Domain: args.map

XIOC detected Domain: args.map

extracted_from_files

Domain
detected Domain: css-tricks.com

XIOC detected Domain: css-tricks.com

extracted_from_files

Domain
detected Domain: messages.js.map

XIOC detected Domain: messages.js.map

extracted_from_files

Domain
detected Domain: utils.js.map

XIOC detected Domain: utils.js.map

extracted_from_files

Domain
detected Domain: webviewutils.js.map

XIOC detected Domain: webviewutils.js.map

extracted_from_files

Domain
detected Domain: treeutils.js.map

XIOC detected Domain: treeutils.js.map

extracted_from_files

Domain
detected Domain: level.map

XIOC detected Domain: level.map

extracted_from_files

Domain
detected Domain: templatehelpers.js.map

XIOC detected Domain: templatehelpers.js.map

extracted_from_files

URL
detected URL: http://va.truepic.com/ejbca/publicweb/status/ocsp0

XIOC detected URL: http://va.truepic.com/ejbca/publicweb/status/ocsp0

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/issues/1

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/issues/1

extracted_from_files

URL
detected URL: http://schemas.openxmlformats.org/package/2006/content-types

XIOC detected URL: http://schemas.openxmlformats.org/package/2006/content-types

extracted_from_files

Domain
detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

Domain
detected Domain: microsoft.visualstudio.services.links.support

XIOC detected Domain: microsoft.visualstudio.services.links.support

extracted_from_files

Domain
detected Domain: schemas.microsoft.com

XIOC detected Domain: schemas.microsoft.com

extracted_from_files

Domain
detected Domain: gitlens.md

XIOC detected Domain: gitlens.md

extracted_from_files

URL
detected URL: https://marketplace.visualstudio.com/items?itemName=frehu.fresh-file-explorer)

XIOC detected URL: https://marketplace.visualstudio.com/items?itemName=frehu.fresh-file-explorer)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer

extracted_from_files

URL
detected URL: https://github.com/sponsors/FreHu

XIOC detected URL: https://github.com/sponsors/FreHu

extracted_from_files

URL
detected URL: https://dev.azure.com/$

XIOC detected URL: https://dev.azure.com/$

extracted_from_files

URL
detected URL: https://org.visualstudio.com/project/_git/repo

XIOC detected URL: https://org.visualstudio.com/project/_git/repo

extracted_from_files

URL
detected URL: https://[email protected]/user/repo.git

XIOC detected URL: https://[email protected]/user/repo.git

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/sync-status.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/sync-status.png)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/pinned.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/pinned.png)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/heatmap.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/heatmap.png)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/resurrect.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/resurrect.png)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/time-window-switch.gif)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/time-window-switch.gif)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer)

extracted_from_files

URL
detected URL: https://open-vsx.org/extension/frehu/fresh-file-explorer)

XIOC detected URL: https://open-vsx.org/extension/frehu/fresh-file-explorer)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/l-history.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/l-history.png)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/history-options.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/history-options.png)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/submodules.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/submodules.png)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/ff-quick-open.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/ff-quick-open.png)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/grouping-modes.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/grouping-modes.png)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/filter-commit.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/filter-commit.png)

extracted_from_files

URL
detected URL: https://css-tricks.com/git-pathspecs-and-how-to-use-them/)

XIOC detected URL: https://css-tricks.com/git-pathspecs-and-how-to-use-them/)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/blob/HEAD/src/commands/discardChangesCommand.ts).

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/blob/HEAD/src/commands/discardChangesCommand.ts).

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/incremental-load.gif)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/incremental-load.gif)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/search-editor.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/search-editor.png)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/search-in-found-files.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/search-in-found-files.png)

extracted_from_files

URL
detected URL: https://marketplace.visualstudio.com/items?itemName=guichina.code-telescope).

XIOC detected URL: https://marketplace.visualstudio.com/items?itemName=guichina.code-telescope).

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/ff-search.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/ff-search.png)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/file-history.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/file-history.png)

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer#readme

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer#readme

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/issues

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/issues

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer.git

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer.git

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/blob/HEAD/COMPARISON_WITH_GITLENS.md).

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/blob/HEAD/COMPARISON_WITH_GITLENS.md).

extracted_from_files

URL
detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/gitlens-views.png)

XIOC detected URL: https://github.com/FreHu/vscode-fresh-file-explorer/raw/HEAD/img/gitlens-views.png)

extracted_from_files

IP
detected IP: ::c

XIOC detected IP: ::c

extracted_from_files

Domain
detected Domain: changelog.md

XIOC detected Domain: changelog.md

extracted_from_files

IP
detected IP: 25c::

XIOC detected IP: 25c::

extracted_from_files

IP
detected IP: ::d

XIOC detected IP: ::d

extracted_from_files

IP
detected IP: 2::

XIOC detected IP: 2::

extracted_from_files

IP
detected IP: ::f

XIOC detected IP: ::f

extracted_from_files

IP
detected IP: 7::

XIOC detected IP: 7::

extracted_from_files

IP
detected IP: b::

XIOC detected IP: b::

extracted_from_files

Domain
detected Domain: 1.configkeys.open

XIOC detected Domain: 1.configkeys.open

extracted_from_files

Domain
detected Domain: 1.configkeys.show

XIOC detected Domain: 1.configkeys.show

extracted_from_files

Domain
detected Domain: abspathsarray.map

XIOC detected Domain: abspathsarray.map

extracted_from_files

IP
detected IP: ::2

XIOC detected IP: ::2

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Fresh File Explorer is a Visual Studio Code Marketplace extension published by Frederik Hudák. Version 1.5.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 84.95/100 (HIGH risk) based on 393 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • Medium: 272 finding(s)
  • Low: 121 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Fresh File Explorer is published by Frederik Hudák on the Visual Studio Code Marketplace marketplace. The extension has approximately 329 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions