Unity Support
From the RiskyPlugins AI security review of the observed evidence.
Analysis record
- Analysed
- 6 days ago
- Version
- v2025.1.4.67
- Artifact
- SHA256 ECC…84D
- Source
- Findings (non-IoC)
Evidence ledger
Ranked by severity · findings with a source location link to the code viewer
YARA Rule Matches
10 rules| Severity | Rule | Hits | Files | Metadata |
|---|---|---|---|---|
| LOW | credential env files | 5 | DotFiles/JetBrains.ReSharper.Plugins.Unity.pdbDotFiles/JetBrains.ReSharper.Plugins.Json.pdbDotFiles/JetBrains.ReSharper.Plugins.Unity.Shaders.pdb +2 more | - |
| LOW | postinstall persistence mechanism | 1 | DotFiles/JetBrains.ReSharper.Plugins.Unity.pdb | - |
| LOW | postinstall file download | 5 | DotFiles/JetBrains.ReSharper.Plugins.Unity.pdbDotFiles/JetBrains.ReSharper.Plugins.Unity.VisualStudio.pdbDotFiles/JetBrains.ReSharper.Plugins.Yaml.pdb +2 more | - |
| LOW | postinstall system command | 5 | DotFiles/JetBrains.ReSharper.Plugins.Unity.Shaders.pdbDotFiles/JetBrains.ReSharper.Plugins.Yaml.pdbDotFiles/JetBrains.ReSharper.Plugins.Unity.VisualStudio.pdb +2 more | - |
| LOW | postinstall crypto operations | 5 | DotFiles/JetBrains.ReSharper.Plugins.Unity.pdbDotFiles/JetBrains.ReSharper.Plugins.Json.pdbDotFiles/JetBrains.ReSharper.Plugins.Unity.Shaders.pdb +2 more | - |
| LOW | postinstall file manipulation | 2 | DotFiles/JetBrains.ReSharper.Plugins.Unity.pdbDotFiles/JetBrains.ReSharper.Plugins.Unity.Shaders.pdb | - |
| LOW | postinstall registry modification | 1 | DotFiles/JetBrains.ReSharper.Plugins.Unity.pdb | - |
| LOW | postinstall obfuscation | 5 | DotFiles/JetBrains.ReSharper.Plugins.Unity.VisualStudio.pdbDotFiles/JetBrains.ReSharper.Plugins.Unity.pdbDotFiles/JetBrains.ReSharper.Plugins.Json.pdb +2 more | - |
| LOW | postinstall network communication | 6 | DotFiles/JetBrains.ReSharper.Plugins.Unity.VisualStudio.pdbDotFiles/JetBrains.ReSharper.Plugins.Unity.pdbDotFiles/JetBrains.ReSharper.Plugins.Json.pdb +3 more | - |
| LOW | DebuggerStatementsShouldNotBeUsed | 3 | JetBrains.Unity.nuspecDotFiles/JetBrains.ReSharper.Plugins.Unity.dllpackage/services/metadata/core-properties/12dc8b8b5fdf4f4e91817b96cd26b17a.psmdcp | - |
Network Indicators
Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.
Network indicators are queued for lazy loading
Scroll this section into view to load the detailed rows.
Publisher Evidence
HighJetBrains
Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
12 evidence rows available.
Finding Categories
YARA Rules Matched
10 rules(38 hits)AI Security Report
AI Security Review
Risky Plugins reviewed this extension with an AI-assisted security workflow on 2026-05-23. The review verdict is benign but powerful with 90% confidence.
Recommended action: no action. Evidence context: threat category none; evidence quality strong.
The Unity Support extension by JetBrains s.r.o. has been analyzed, and the findings suggest that it is a legitimate development tool. The filesystem and process access are justified by the extension's stated purpose, which is to provide Unity support for JetBrains products. The findings are primarily metadata-related, with no indications of malicious behavior, credential theft, or data exfiltration. The strongest counterargument to this verdict could be the presence of numerous metadata findings, but these are expected for a legitimate extension with a large number of files. The extension's developer, JetBrains s.r.o., is a verified publisher on the marketplace, which adds to the confidence in the verdict. The extension's purpose is to provide Unity support, which requires access to certain files and processes, and the findings do not suggest any excessive or suspicious behavior. In conclusion, the findings are consistent with the expected behavior of a legitimate IDE extension, and there is no evidence to suggest malicious intent.
Key Reasons
- Legitimate filesystem and process access for Unity support
- No indications of malicious behavior or credential theft
- Verified publisher on the marketplace
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
Python Community Edition
JetBrains
Web Browser (JCEF)
JetBrains
Kotlin Onboarding: Collections
JetBrains
Kotlin Onboarding 2: Object-Oriented Programming
JetBrains
YourKit Profiler for IDE Performance Testing
JetBrains
OpenTelemetry
JetBrains