JetBrains Marketplace Licensing
Based on the RiskyPlugins AI security review of the observed evidence.
Analysis record
- Analysed
- Today
- Version
- v263.6259.36
- Artifact
- SHA256 7A3…09A
- Source
- Findings (non-IoC)
Evidence ledger
Ranked by severity · findings with a source location link to the code viewer
YARA Rule Matches
10 rules| Severity | Rule | Hits | Files | Metadata |
|---|---|---|---|---|
| LOW | postinstall persistence mechanism | 1 | marketplace/lib/boot/marketplace-impl.jar | - |
| LOW | postinstall crypto operations | 3 | marketplace/lib/modules/intellij.marketplace.statistics.jarmarketplace/lib/boot/marketplace-bootstrap.jarmarketplace/lib/boot/marketplace-impl.jar | - |
| LOW | postinstall file manipulation | 4 | marketplace/lib/modules/intellij.marketplace.statistics.jarmarketplace/lib/boot/marketplace-bootstrap.jarmarketplace/lib/marketplace.jar +1 more | - |
| LOW | postinstall registry modification | 1 | marketplace/lib/boot/marketplace-impl.jar | - |
| LOW | postinstall obfuscation | 3 | marketplace/lib/boot/marketplace-bootstrap.jarmarketplace/lib/marketplace.jarmarketplace/lib/boot/marketplace-impl.jar | - |
| LOW | postinstall network communication | 4 | marketplace/lib/modules/intellij.marketplace.statistics.jarmarketplace/lib/boot/marketplace-bootstrap.jarmarketplace/lib/marketplace.jar +1 more | - |
| LOW | postinstall system command | 4 | marketplace/lib/modules/intellij.marketplace.statistics.jarmarketplace/lib/boot/marketplace-bootstrap.jarmarketplace/lib/marketplace.jar +1 more | - |
| LOW | credential generic tokens | 1 | marketplace/lib/boot/marketplace-impl.jar | - |
| LOW | postinstall file download | 2 | marketplace/lib/marketplace.jarmarketplace/lib/boot/marketplace-impl.jar | - |
| LOW | DebuggerStatementsShouldNotBeUsed | 1 | marketplace/lib/boot/marketplace-impl.jar | - |
Publisher Evidence
HighJetBrains
Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
12 evidence rows available.
Finding Categories
YARA Rules Matched
10 rules(24 hits)AI Security Report
AI Security Review
Evidence context: threat category none; evidence quality strong.
The JetBrains Marketplace Licensing extension has been analyzed, and the findings indicate that it is a legitimate development tool. The extension's purpose is to manage licensing for JetBrains products, and the filesystem and process access are justified by this purpose. The findings include several metadata hashes, which are expected for a legitimate extension. There are no indications of malicious behavior, such as postinstall payload execution, credential theft, or exfiltration. The strongest counterargument to this verdict would be the potential for the extension to access sensitive information, but the findings do not support this claim. The extension's access to the filesystem and processes is limited to what is necessary for its stated purpose. The user count for this extension is high, which suggests that it is a widely used and trusted tool. Overall, the findings suggest that this extension is likely a false positive, and its behavior is consistent with a legitimate development tool.
Key Reasons
- legitimate development tool
- justified filesystem and process access
- no indications of malicious behavior
False Positive Considerations
- bundled code
- expected IDE behavior
Reviewed 2026-05-23; recommended action: no action; model confidence 90%.
JetBrains version history
Risk trend by version
45 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.
Pick any point on the chart to explore that version's code below.
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace