Is Notes, To-Dos And Things safe to use?

Notes, To-Dos And Things has a security risk score of 50.39/100 (MEDIUM risk). Our security analysis detected 211 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Notes, To-Dos And Things?

Based on our automated security analysis, Notes, To-Dos And Things presents medium risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "Notes, To-Dos And Things" on VS Code Marketplace Safe to Install?

Name: Notes, To-Dos And Things
Availability: InStock
Author: skyler

skyler · vscode · v1.1.2

Notes, To-Dos And Things - Notes, to-do lists and reminders that accessible everywhere at any time - VSCode, mobile, tablet, doesn't matter even without VSCode installed on that device.

Risk Assessment

Analyzed

50.39

out of 100

MEDIUM

211 security findings detected across all analyzers

VS Code extension analyzed via package manifest and static code analysis

Severity Breakdown

Critical

High

182

Medium

Low

Info

Finding Categories

Malware Signatures

181

IoC Indicators

YARA Rules Matched

11 rules(21 hits)

postinstall file manipulation postinstall network communication postinstall system command PM Zip with js credential env files postinstall persistence mechanism postinstall crypto operations postinstall obfuscation UsingShellInterpreterWhenExecutingOSCommands postinstall file download postinstall registry modification

About This Extension

Notes, To-Dos And Things - Notes, to-do lists and reminders that accessible everywhere at any time - VSCode, mobile, tablet, doesn't matter even without VSCode installed on that device.

Detailed Findings

29 total

YARA Rule Matches

11 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

IP Addresses

Domains

Strings

181

All Indicators · 181

URL

detected URL: https://custom-icon-badges.demolab.com/badge/PowerShell-5391FE?logo=powershell-white&logoColor=fff

XIOC detected URL: https://custom-icon-badges.demolab.com/badge/PowerShell-5391FE?logo=powershell-white&logoColor=fff

extracted_from_files

Domain

detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/check.jpg)

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/check.jpg)

extracted_from_files

URL

detected URL: https://youtu.be/I70mvm_ISLs).

XIOC detected URL: https://youtu.be/I70mvm_ISLs).

extracted_from_files

URL

detected URL: http://schemas.microsoft.com/developer/vsx-schema/2011

XIOC detected URL: http://schemas.microsoft.com/developer/vsx-schema/2011

extracted_from_files

URL

detected URL: http://schemas.microsoft.com/developer/vsx-schema-design/2011

XIOC detected URL: http://schemas.microsoft.com/developer/vsx-schema-design/2011

extracted_from_files

URL

detected URL: https://github.com/8an3/ntrsync.git

XIOC detected URL: https://github.com/8an3/ntrsync.git

extracted_from_files

URL

detected URL: https://jquery.com

XIOC detected URL: https://jquery.com

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/main/utils/5.gif)

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/main/utils/5.gif)

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/update.jpg)

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/update.jpg)

extracted_from_files

URL

detected URL: https://github.com/settings/personal-access-tokens)

XIOC detected URL: https://github.com/settings/personal-access-tokens)

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/quick-pick.jpg)

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/quick-pick.jpg)

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/one.jpg)

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/one.jpg)

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/new-to-do.jpg)

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/new-to-do.jpg)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/Svelte-4A4A55?style=for-the-badge&logo=svelte&logoColor=FF3E00

XIOC detected URL: https://img.shields.io/badge/Svelte-4A4A55?style=for-the-badge&logo=svelte&logoColor=FF3E00

extracted_from_files

URL

detected URL: https://svelte.dev/

XIOC detected URL: https://svelte.dev/

extracted_from_files

URL

detected URL: https://img.shields.io/badge/Laravel-FF2D20?style=for-the-badge&logo=laravel&logoColor=white

XIOC detected URL: https://img.shields.io/badge/Laravel-FF2D20?style=for-the-badge&logo=laravel&logoColor=white

extracted_from_files

URL

detected URL: https://laravel.com

XIOC detected URL: https://laravel.com

extracted_from_files

URL

detected URL: https://img.shields.io/badge/Bootstrap-563D7C?style=for-the-badge&logo=bootstrap&logoColor=white

XIOC detected URL: https://img.shields.io/badge/Bootstrap-563D7C?style=for-the-badge&logo=bootstrap&logoColor=white

extracted_from_files

URL

detected URL: https://getbootstrap.com

XIOC detected URL: https://getbootstrap.com

extracted_from_files

URL

detected URL: https://img.shields.io/badge/jQuery-0769AD?style=for-the-badge&logo=jquery&logoColor=white

XIOC detected URL: https://img.shields.io/badge/jQuery-0769AD?style=for-the-badge&logo=jquery&logoColor=white

extracted_from_files

URL

detected URL: https://nextjs.org/

XIOC detected URL: https://nextjs.org/

extracted_from_files

URL

detected URL: https://img.shields.io/badge/React-20232A?style=for-the-badge&logo=react&logoColor=61DAFB

XIOC detected URL: https://img.shields.io/badge/React-20232A?style=for-the-badge&logo=react&logoColor=61DAFB

extracted_from_files

URL

detected URL: https://reactjs.org/

XIOC detected URL: https://reactjs.org/

extracted_from_files

URL

detected URL: https://img.shields.io/badge/Vue.js-35495E?style=for-the-badge&logo=vuedotjs&logoColor=4FC08D

XIOC detected URL: https://img.shields.io/badge/Vue.js-35495E?style=for-the-badge&logo=vuedotjs&logoColor=4FC08D

extracted_from_files

URL

detected URL: https://vuejs.org/

XIOC detected URL: https://vuejs.org/

extracted_from_files

URL

detected URL: https://img.shields.io/badge/Angular-DD0031?style=for-the-badge&logo=angular&logoColor=white

XIOC detected URL: https://img.shields.io/badge/Angular-DD0031?style=for-the-badge&logo=angular&logoColor=white

extracted_from_files

URL

detected URL: https://angular.io/

XIOC detected URL: https://angular.io/

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/github_username/repo_name/issues

XIOC detected URL: https://raw.githubusercontent.com/github_username/repo_name/issues

extracted_from_files

URL

detected URL: https://img.shields.io/github/license/github_username/repo_name.svg?style=for-the-badge

XIOC detected URL: https://img.shields.io/github/license/github_username/repo_name.svg?style=for-the-badge

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/github_username/repo_name/blob/master/LICENSE.txt

XIOC detected URL: https://raw.githubusercontent.com/github_username/repo_name/blob/master/LICENSE.txt

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-LinkedIn-black.svg?style=for-the-badge&logo=linkedin&colorB=555

XIOC detected URL: https://img.shields.io/badge/-LinkedIn-black.svg?style=for-the-badge&logo=linkedin&colorB=555

extracted_from_files

URL

detected URL: https://linkedin.com/in/linkedin_username

XIOC detected URL: https://linkedin.com/in/linkedin_username

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/inttter/md-badges

XIOC detected URL: https://raw.githubusercontent.com/inttter/md-badges

extracted_from_files

URL

detected URL: https://img.shields.io/badge/next.js-000000?style=for-the-badge&logo=nextdotjs&logoColor=white

XIOC detected URL: https://img.shields.io/badge/next.js-000000?style=for-the-badge&logo=nextdotjs&logoColor=white

extracted_from_files

URL

detected URL: https://img.shields.io/github/contributors/github_username/repo_name.svg?style=for-the-badge

XIOC detected URL: https://img.shields.io/github/contributors/github_username/repo_name.svg?style=for-the-badge

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/github_username/repo_name/graphs/contributors

XIOC detected URL: https://raw.githubusercontent.com/github_username/repo_name/graphs/contributors

extracted_from_files

URL

detected URL: https://img.shields.io/github/forks/github_username/repo_name.svg?style=for-the-badge

XIOC detected URL: https://img.shields.io/github/forks/github_username/repo_name.svg?style=for-the-badge

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/github_username/repo_name/network/members

XIOC detected URL: https://raw.githubusercontent.com/github_username/repo_name/network/members

extracted_from_files

URL

detected URL: https://img.shields.io/github/stars/github_username/repo_name.svg?style=for-the-badge

XIOC detected URL: https://img.shields.io/github/stars/github_username/repo_name.svg?style=for-the-badge

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/github_username/repo_name/stargazers

XIOC detected URL: https://raw.githubusercontent.com/github_username/repo_name/stargazers

extracted_from_files

URL

detected URL: https://img.shields.io/github/issues/github_username/repo_name.svg?style=for-the-badge

XIOC detected URL: https://img.shields.io/github/issues/github_username/repo_name.svg?style=for-the-badge

extracted_from_files

URL

detected URL: https://img.shields.io/badge/Postgres-%23316192.svg?logo=postgresql&logoColor=white

XIOC detected URL: https://img.shields.io/badge/Postgres-%23316192.svg?logo=postgresql&logoColor=white

extracted_from_files

URL

detected URL: https://img.shields.io/badge/Remix-000?logo=remix&logoColor=fff

XIOC detected URL: https://img.shields.io/badge/Remix-000?logo=remix&logoColor=fff

extracted_from_files

URL

detected URL: https://img.shields.io/badge/pnpm-F69220?logo=pnpm&logoColor=fff

XIOC detected URL: https://img.shields.io/badge/pnpm-F69220?logo=pnpm&logoColor=fff

extracted_from_files

URL

detected URL: https://img.shields.io/badge/TypeScript-3178C6?logo=typescript&logoColor=fff

XIOC detected URL: https://img.shields.io/badge/TypeScript-3178C6?logo=typescript&logoColor=fff

extracted_from_files

Domain

detected Domain: i.viewcolumn.one

XIOC detected Domain: i.viewcolumn.one

extracted_from_files

URL

detected URL: https://img.shields.io/badge/JavaScript-F7DF1E?logo=javascript&logoColor=000

XIOC detected URL: https://img.shields.io/badge/JavaScript-F7DF1E?logo=javascript&logoColor=000

extracted_from_files

URL

detected URL: https://www.markdownguide.org/basic-syntax/#reference-style-links

XIOC detected URL: https://www.markdownguide.org/basic-syntax/#reference-style-links

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-SWR-000000?style=flat&logo=swr&logoColor=white

XIOC detected URL: https://img.shields.io/badge/-SWR-000000?style=flat&logo=swr&logoColor=white

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-PostCSS-DD3A0A?style=flat&logo=postcss&logoColor=white

XIOC detected URL: https://img.shields.io/badge/-PostCSS-DD3A0A?style=flat&logo=postcss&logoColor=white

extracted_from_files

URL

detected URL: https://img.shields.io/badge/github-%23121011.svg?style=for-the-badge&logo=github&logoColor=white

XIOC detected URL: https://img.shields.io/badge/github-%23121011.svg?style=for-the-badge&logo=github&logoColor=white

extracted_from_files

URL

detected URL: https://img.shields.io/badge/tailwindcss-0F172A?&logo=tailwindcss

XIOC detected URL: https://img.shields.io/badge/tailwindcss-0F172A?&logo=tailwindcss

extracted_from_files

URL

detected URL: https://img.shields.io/badge/Three.js-000000?style=for-the-badge&logo=three.js&logoColor=white

XIOC detected URL: https://img.shields.io/badge/Three.js-000000?style=for-the-badge&logo=three.js&logoColor=white

extracted_from_files

URL

detected URL: https://img.shields.io/badge/Vercel-%23000000.svg?logo=vercel&logoColor=white

XIOC detected URL: https://img.shields.io/badge/Vercel-%23000000.svg?logo=vercel&logoColor=white

extracted_from_files

URL

detected URL: https://custom-icon-badges.demolab.com/badge/Visual%20Studio%20Code-0078d7.svg?logo=vsc&logoColor=white

XIOC detected URL: https://custom-icon-badges.demolab.com/badge/Visual%20Studio%20Code-0078d7.svg?logo=vsc&logoColor=white

extracted_from_files

URL

detected URL: https://github.com/github_username/repo_name/issues/new?labels=enhancement&template=feature-request---.md

XIOC detected URL: https://github.com/github_username/repo_name/issues/new?labels=enhancement&template=feature-request---.md

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/LICENSE.md)

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/LICENSE.md)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-CodeSandbox-151515?style=flat&logo=codesandbox&logoColor=white

XIOC detected URL: https://img.shields.io/badge/-CodeSandbox-151515?style=flat&logo=codesandbox&logoColor=white

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-shadcn/ui-000000?style=flat&logo=shadcnui&logoColor=white

XIOC detected URL: https://img.shields.io/badge/-shadcn/ui-000000?style=flat&logo=shadcnui&logoColor=white

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-CodeMirror-D30707?style=flat&logo=codemirror&logoColor=white

XIOC detected URL: https://img.shields.io/badge/-CodeMirror-D30707?style=flat&logo=codemirror&logoColor=white

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Axios-5A29E4?style=flat&logo=axios&logoColor=white

XIOC detected URL: https://img.shields.io/badge/-Axios-5A29E4?style=flat&logo=axios&logoColor=white

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-D3.js-F9A03C?style=flat&logo=d3dotjs&logoColor=white

XIOC detected URL: https://img.shields.io/badge/-D3.js-F9A03C?style=flat&logo=d3dotjs&logoColor=white

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/quick-pick.jpg

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/quick-pick.jpg

extracted_from_files

URL

detected URL: https://github.com/settings/personal-access-tokens

XIOC detected URL: https://github.com/settings/personal-access-tokens

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/update.jpg

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/update.jpg

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/main/utils/5.gif

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/main/utils/5.gif

extracted_from_files

URL

detected URL: https://youtu.be/I70mvm_ISLs

XIOC detected URL: https://youtu.be/I70mvm_ISLs

extracted_from_files

URL

detected URL: https://github.com/github_username/repo_name

XIOC detected URL: https://github.com/github_username/repo_name

extracted_from_files

URL

detected URL: https://github.com/github_username/repo_name/issues/new?labels=bug&template=bug-report---.md

XIOC detected URL: https://github.com/github_username/repo_name/issues/new?labels=bug&template=bug-report---.md

extracted_from_files

URL

detected URL: https://catalyst-software.vercel.app/dev/TaskNotesAndThings/home

XIOC detected URL: https://catalyst-software.vercel.app/dev/TaskNotesAndThings/home

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/check.jpg

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/check.jpg

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/usage.gif

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/usage.gif

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/one.jpg

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/one.jpg

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/new-to-do.jpg

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/new-to-do.jpg

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/new-doc.jpg

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/new-doc.jpg

extracted_from_files

URL

detected URL: https://api.github.com

XIOC detected URL: https://api.github.com

extracted_from_files

URL

detected URL: https://github.com/bitinn/node-fetch)

XIOC detected URL: https://github.com/bitinn/node-fetch)

extracted_from_files

URL

detected URL: https://uploads.github.com

XIOC detected URL: https://uploads.github.com

extracted_from_files

URL

detected URL: https://github.com/settings/tokens/new?scopes=repo&description=VSCode%20Notes%20Sync

XIOC detected URL: https://github.com/settings/tokens/new?scopes=repo&description=VSCode%20Notes%20Sync

extracted_from_files

URL

detected URL: https://github.com/$

XIOC detected URL: https://github.com/$

extracted_from_files

URL

detected URL: https://git.io/upgrade-before-after-hook-to-1.4'),l=!0),n()

XIOC detected URL: https://git.io/upgrade-before-after-hook-to-1.4'),l=!0),n()

extracted_from_files

URL

detected URL: https://github.com/jonschlinkert/is-plain-object

XIOC detected URL: https://github.com/jonschlinkert/is-plain-object

extracted_from_files

Domain

detected Domain: changelog.md

XIOC detected Domain: changelog.md

extracted_from_files

Domain

detected Domain: mergewithdevstack.md

XIOC detected Domain: mergewithdevstack.md

extracted_from_files

Domain

detected Domain: readme.dev.md

XIOC detected Domain: readme.dev.md

extracted_from_files

Domain

detected Domain: h.gh

XIOC detected Domain: h.gh

extracted_from_files

Domain

detected Domain: schemas.microsoft.com

XIOC detected Domain: schemas.microsoft.com

extracted_from_files

URL

detected URL: http://schemas.openxmlformats.org/package/2006/content-types

XIOC detected URL: http://schemas.openxmlformats.org/package/2006/content-types

extracted_from_files

detected IP: ::

XIOC detected IP: ::

extracted_from_files

URL

detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/new-doc.jpg)

XIOC detected URL: https://raw.githubusercontent.com/8an3/dev-notes/main/todo/new-doc.jpg)

extracted_from_files

Domain

detected Domain: jquery.com

XIOC detected Domain: jquery.com

extracted_from_files

Domain

detected Domain: bug-report---.md

XIOC detected Domain: bug-report---.md

extracted_from_files

Domain

detected Domain: feature-request---.md

XIOC detected Domain: feature-request---.md

extracted_from_files

Domain

detected Domain: license.md

XIOC detected Domain: license.md

extracted_from_files

Domain

detected Domain: shields.io

XIOC detected Domain: shields.io

extracted_from_files

Domain

detected Domain: bootstrap.com

XIOC detected Domain: bootstrap.com

extracted_from_files

Domain

detected Domain: linkedin.com

XIOC detected Domain: linkedin.com

extracted_from_files

Domain

detected Domain: nextjs.org

XIOC detected Domain: nextjs.org

extracted_from_files

Domain

detected Domain: reactjs.org

XIOC detected Domain: reactjs.org

extracted_from_files

Domain

detected Domain: vuejs.org

XIOC detected Domain: vuejs.org

extracted_from_files

Domain

detected Domain: angular.io

XIOC detected Domain: angular.io

extracted_from_files

Domain

detected Domain: svelte.dev

XIOC detected Domain: svelte.dev

extracted_from_files

Domain

detected Domain: laravel.com

XIOC detected Domain: laravel.com

extracted_from_files

Domain

detected Domain: e.checkitem.children.map

XIOC detected Domain: e.checkitem.children.map

extracted_from_files

Domain

detected Domain: catalyst-software.vercel.app

XIOC detected Domain: catalyst-software.vercel.app

extracted_from_files

Domain

detected Domain: raw.githubusercontent.com

XIOC detected Domain: raw.githubusercontent.com

extracted_from_files

Domain

detected Domain: youtu.be

XIOC detected Domain: youtu.be

extracted_from_files

Domain

detected Domain: img.shields.io

XIOC detected Domain: img.shields.io

extracted_from_files

Domain

detected Domain: custom-icon-badges.demolab.com

XIOC detected Domain: custom-icon-badges.demolab.com

extracted_from_files

Domain

detected Domain: www.markdownguide.org

XIOC detected Domain: www.markdownguide.org

extracted_from_files

Domain

detected Domain: a.id

XIOC detected Domain: a.id

extracted_from_files

Domain

detected Domain: p.map

XIOC detected Domain: p.map

extracted_from_files

Domain

detected Domain: a.date

XIOC detected Domain: a.date

extracted_from_files

Domain

detected Domain: e.exports.is

XIOC detected Domain: e.exports.is

extracted_from_files

Domain

detected Domain: i.map

XIOC detected Domain: i.map

extracted_from_files

Domain

detected Domain: this.context.secrets.store

XIOC detected Domain: this.context.secrets.store

extracted_from_files

Domain

detected Domain: i.configurationtarget.global

XIOC detected Domain: i.configurationtarget.global

extracted_from_files

URL

detected Domain: this.url.host

XIOC detected Domain: this.url.host

extracted_from_files

Domain

detected Domain: this.base.host

XIOC detected Domain: this.base.host

extracted_from_files

Domain

detected Domain: a.host

XIOC detected Domain: a.host

extracted_from_files

Domain

detected Domain: u.id

XIOC detected Domain: u.id

extracted_from_files

Domain

detected Domain: todo.md

XIOC detected Domain: todo.md

extracted_from_files

Domain

detected Domain: reminder.md

XIOC detected Domain: reminder.md

extracted_from_files

Domain

detected Domain: c.id

XIOC detected Domain: c.id

extracted_from_files

Domain

detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

Domain

detected Domain: o.map

XIOC detected Domain: o.map

extracted_from_files

Domain

detected Domain: data.map

XIOC detected Domain: data.map

extracted_from_files

Domain

detected Domain: e.map

XIOC detected Domain: e.map

extracted_from_files

Domain

detected Domain: t.data.map

XIOC detected Domain: t.data.map

extracted_from_files

Domain

detected Domain: e.search

XIOC detected Domain: e.search

extracted_from_files

Domain

detected Domain: o.search

XIOC detected Domain: o.search

extracted_from_files

Domain

detected Domain: vscode.open

XIOC detected Domain: vscode.open

extracted_from_files

Domain

detected Domain: ondidchangetreedata.fire

XIOC detected Domain: ondidchangetreedata.fire

extracted_from_files

Domain

detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain

detected Domain: d.id

XIOC detected Domain: d.id

extracted_from_files

Domain

detected Domain: getbootstrap.com

XIOC detected Domain: getbootstrap.com

extracted_from_files

Domain

detected Domain: d.show

XIOC detected Domain: d.show

extracted_from_files

Domain

detected Domain: d.map

XIOC detected Domain: d.map

extracted_from_files

Domain

detected Domain: e.log.info

XIOC detected Domain: e.log.info

extracted_from_files

Domain

detected Domain: e.data.total

XIOC detected Domain: e.data.total

extracted_from_files

Domain

detected Domain: e.headers.link

XIOC detected Domain: e.headers.link

extracted_from_files

Domain

detected Domain: p.next

XIOC detected Domain: p.next

extracted_from_files

Domain

detected Domain: d.value.data

XIOC detected Domain: d.value.data

extracted_from_files

Domain

detected Domain: uploads.github.com

XIOC detected Domain: uploads.github.com

extracted_from_files

Domain

detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain

detected Domain: e.errors.map

XIOC detected Domain: e.errors.map

extracted_from_files

Domain

detected Domain: p.errors.map

XIOC detected Domain: p.errors.map

extracted_from_files

Domain

detected Domain: this.data

XIOC detected Domain: this.data

extracted_from_files

Domain

detected Domain: p.data

XIOC detected Domain: p.data

extracted_from_files

Domain

detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain

detected Domain: e.data.data

XIOC detected Domain: e.data.data

extracted_from_files

Domain

detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain

detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain

detected Domain: i.call

XIOC detected Domain: i.call

extracted_from_files

Domain

detected Domain: a.constructor.name

XIOC detected Domain: a.constructor.name

extracted_from_files

Domain

detected Domain: ce.prototype.name

XIOC detected Domain: ce.prototype.name

extracted_from_files

Domain

detected Domain: p.stream

XIOC detected Domain: p.stream

extracted_from_files

Domain

detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain

detected Domain: d.link

XIOC detected Domain: d.link

extracted_from_files

Domain

detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain

detected Domain: a.stream

XIOC detected Domain: a.stream

extracted_from_files

Domain

detected Domain: a.name

XIOC detected Domain: a.name

extracted_from_files

Domain

detected Domain: e.constructor.name

XIOC detected Domain: e.constructor.name

extracted_from_files

Domain

detected Domain: e.stream

XIOC detected Domain: e.stream

extracted_from_files

Domain

detected Domain: u.call

XIOC detected Domain: u.call

extracted_from_files

Domain

detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain

detected Domain: d.mediatype.previews.map

XIOC detected Domain: d.mediatype.previews.map

extracted_from_files

Domain

detected Domain: a.map

XIOC detected Domain: a.map

extracted_from_files

Domain

detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain

detected Domain: r.data

XIOC detected Domain: r.data

extracted_from_files

Domain

detected Domain: api.github.com

XIOC detected Domain: api.github.com

extracted_from_files

Domain

detected Domain: error.call

XIOC detected Domain: error.call

extracted_from_files

Domain

detected Domain: o.prototype.name

XIOC detected Domain: o.prototype.name

extracted_from_files

Domain

detected Domain: schemas.openxmlformats.org

XIOC detected Domain: schemas.openxmlformats.org

extracted_from_files

Domain

detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain

detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain

detected Domain: git.io

XIOC detected Domain: git.io

extracted_from_files

Domain

detected Domain: e.host

XIOC detected Domain: e.host

extracted_from_files

URL

detected Domain: url.host

XIOC detected Domain: url.host

extracted_from_files

URL

detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Notes, To-Dos And Things is a Visual Studio Code Marketplace extension published by skyler. Version 1.1.2 has been analyzed by the Risky Plugins security platform, receiving a risk score of 50.39/100 (MEDIUM risk) based on 211 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

High: 21 finding(s)
Medium: 182 finding(s)
Low: 8 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Notes, To-Dos And Things is published by skyler on the Visual Studio Code Marketplace marketplace. The extension has approximately 20 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

DevStack

skyler

CRITICAL 372 users

G-Switcher

Skyler

HIGH 6 users

G-Switcher

Skyler

HIGH 6 users

ADX Query Viewer

yossi-eynav

CRITICAL 17 users

Code Execution Sound Alert

Gaurav Mehta

CRITICAL 36 users

Aggo Builder

Zhao Li

CRITICAL 12 users

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

About This Extension

Detailed Findings

DEP-react-native-elements-^3.4.3

DEP-react-native-vector-icons-^10.2.0

DEP-simple-git-^3.15.0

DEP-prisma-docs-generator-0.7.0

DEP-@octokit/rest-^18.12.0

DEP-boxicons-^2.1.4

DEP-react-^19.1.0

DEP-react-native-^0.78.2

YARA Rule Matches

postinstall file manipulation

postinstall network communication

postinstall system command

PM Zip with js

credential env files

postinstall persistence mechanism

postinstall crypto operations

postinstall obfuscation

UsingShellInterpreterWhenExecutingOSCommands

postinstall file download

postinstall registry modification

Indicators of Compromise

All Indicators · 181

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

Frequently Asked Questions

Similar Extensions

DevStack

G-Switcher

G-Switcher

ADX Query Viewer

Code Execution Sound Alert

Aggo Builder