Is "Tasklist" on VS Code Marketplace Safe to Install?

Harshil-Kaneria · vscode · v1.0.3

This Extension is make for Developer those want to do list inside vs code and improve productivity

Risk Assessment

Analyzed
64.94
out of 100
MEDIUM

442 security findings detected across all analyzers

VS Code extension analyzed via package manifest and static code analysis

Severity Breakdown

0
Critical
26
High
416
Medium
0
Low
0
Info

Finding Categories

26
Malware Signatures
1
Obfuscation
5
Network
410
IoC Indicators

YARA Rules Matched

11 rules(26 hits)
postinstall obfuscation postinstall system command postinstall file download postinstall crypto operations postinstall network communication NoUseWeakRandom SQLInjection postinstall file manipulation LocalStorageShouldNotBeUsed postinstall environment access NoUseEval

About This Extension

This Extension is make for Developer those want to do list inside vs code and improve productivity

Detailed Findings

32 total

YARA Rule Matches

11 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
63
IP Addresses
24
Domains
336
Strings
410

All Indicators · 410

Domain
detected Domain: ui.keycode.tab

XIOC detected Domain: ui.keycode.tab

extracted_from_files

Domain
detected Domain: this.off

XIOC detected Domain: this.off

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

IP
detected IP: 3::

XIOC detected IP: 3::

extracted_from_files

Domain
detected Domain: taskliststatusbaritem.show

XIOC detected Domain: taskliststatusbaritem.show

extracted_from_files

Domain
detected Domain: vscode.viewcolumn.one

XIOC detected Domain: vscode.viewcolumn.one

extracted_from_files

Domain
detected Domain: raw.githubusercontent.com

XIOC detected Domain: raw.githubusercontent.com

extracted_from_files

Domain
detected Domain: keepachangelog.com

XIOC detected Domain: keepachangelog.com

extracted_from_files

Domain
detected Domain: schemas.openxmlformats.org

XIOC detected Domain: schemas.openxmlformats.org

extracted_from_files

IP
detected IP: e::bef

XIOC detected IP: e::bef

extracted_from_files

IP
detected IP: e::af

XIOC detected IP: e::af

extracted_from_files

Domain
detected Domain: textarea.form-control.is

XIOC detected Domain: textarea.form-control.is

extracted_from_files

Domain
detected Domain: form-control.is

XIOC detected Domain: form-control.is

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: getbootstrap.com

XIOC detected Domain: getbootstrap.com

extracted_from_files

Domain
detected Domain: rmw.kz

XIOC detected Domain: rmw.kz

extracted_from_files

Domain
detected Domain: u.am

XIOC detected Domain: u.am

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: btn-outline-warning.dropdown-toggle.show

XIOC detected Domain: btn-outline-warning.dropdown-toggle.show

extracted_from_files

Domain
detected Domain: btn-outline-info.dropdown-toggle.show

XIOC detected Domain: btn-outline-info.dropdown-toggle.show

extracted_from_files

Domain
detected Domain: btn-outline-success.dropdown-toggle.show

XIOC detected Domain: btn-outline-success.dropdown-toggle.show

extracted_from_files

Domain
detected Domain: btn-outline-secondary.dropdown-toggle.show

XIOC detected Domain: btn-outline-secondary.dropdown-toggle.show

extracted_from_files

Domain
detected Domain: btn-outline-primary.dropdown-toggle.show

XIOC detected Domain: btn-outline-primary.dropdown-toggle.show

extracted_from_files

Domain
detected Domain: form-check-input.is

XIOC detected Domain: form-check-input.is

extracted_from_files

Domain
detected Domain: form-select.is

XIOC detected Domain: form-select.is

extracted_from_files

Domain
detected Domain: modal-backdrop.show

XIOC detected Domain: modal-backdrop.show

extracted_from_files

Domain
detected Domain: modal.show

XIOC detected Domain: modal.show

extracted_from_files

Domain
detected Domain: nav-item.show

XIOC detected Domain: nav-item.show

extracted_from_files

Domain
detected Domain: dropdown-menu.show

XIOC detected Domain: dropdown-menu.show

extracted_from_files

Domain
detected Domain: btn-outline-dark.dropdown-toggle.show

XIOC detected Domain: btn-outline-dark.dropdown-toggle.show

extracted_from_files

Domain
detected Domain: btn-outline-light.dropdown-toggle.show

XIOC detected Domain: btn-outline-light.dropdown-toggle.show

extracted_from_files

Domain
detected Domain: btn-outline-danger.dropdown-toggle.show

XIOC detected Domain: btn-outline-danger.dropdown-toggle.show

extracted_from_files

Domain
detected Domain: json.org

XIOC detected Domain: json.org

extracted_from_files

Domain
detected Domain: jquery.org

XIOC detected Domain: jquery.org

extracted_from_files

Domain
detected Domain: sizzlejs.com

XIOC detected Domain: sizzlejs.com

extracted_from_files

Domain
detected Domain: jquery.com

XIOC detected Domain: jquery.com

extracted_from_files

Domain
detected Domain: bootstrap.min.css.map

XIOC detected Domain: bootstrap.min.css.map

extracted_from_files

Domain
detected Domain: offcanvas.show

XIOC detected Domain: offcanvas.show

extracted_from_files

IP
detected Domain: tooltip.show

XIOC detected Domain: tooltip.show

extracted_from_files

Domain
detected Domain: fluidproject.org

XIOC detected Domain: fluidproject.org

extracted_from_files

Domain
detected Domain: blindsignals.com

XIOC detected Domain: blindsignals.com

extracted_from_files

Domain
detected Domain: developer.mozilla.org

XIOC detected Domain: developer.mozilla.org

extracted_from_files

Domain
detected Domain: msdn.microsoft.com

XIOC detected Domain: msdn.microsoft.com

extracted_from_files

IP
detected Domain: javascript.nwbox.com

XIOC detected Domain: javascript.nwbox.com

extracted_from_files

Domain
detected Domain: bugs.jquery.com

XIOC detected Domain: bugs.jquery.com

extracted_from_files

Domain
detected Domain: weblogs.java.net

XIOC detected Domain: weblogs.java.net

extracted_from_files

Domain
detected Domain: asp.net

XIOC detected Domain: asp.net

extracted_from_files

Domain
detected Domain: helpful.knobs-dials.com

XIOC detected Domain: helpful.knobs-dials.com

extracted_from_files

Domain
detected Domain: bugs.webkit.org

XIOC detected Domain: bugs.webkit.org

extracted_from_files

Domain
detected Domain: bugzilla.mozilla.org

XIOC detected Domain: bugzilla.mozilla.org

extracted_from_files

Domain
detected Domain: erik.eae.net

XIOC detected Domain: erik.eae.net

extracted_from_files

Domain
detected Domain: dev.w3.org

XIOC detected Domain: dev.w3.org

extracted_from_files

Domain
detected Domain: jsperf.com

XIOC detected Domain: jsperf.com

extracted_from_files

Domain
detected Domain: trim.call

XIOC detected Domain: trim.call

extracted_from_files

Domain
detected Domain: hasown.call

XIOC detected Domain: hasown.call

extracted_from_files

Domain
detected Domain: tostring.call

XIOC detected Domain: tostring.call

extracted_from_files

Domain
detected Domain: callback.call

XIOC detected Domain: callback.call

extracted_from_files

Domain
detected Domain: jquery.map

XIOC detected Domain: jquery.map

extracted_from_files

Domain
detected Domain: slice.call

XIOC detected Domain: slice.call

extracted_from_files

Domain
detected Domain: elem.id

XIOC detected Domain: elem.id

extracted_from_files

Domain
detected Domain: sizzle.support

XIOC detected Domain: sizzle.support

extracted_from_files

Domain
detected Domain: elem.style

XIOC detected Domain: elem.style

extracted_from_files

Domain
detected Domain: value.call

XIOC detected Domain: value.call

extracted_from_files

Domain
detected Domain: bulk.call

XIOC detected Domain: bulk.call

extracted_from_files

Domain
detected Domain: fn.call

XIOC detected Domain: fn.call

extracted_from_files

Domain
detected Domain: indexof.call

XIOC detected Domain: indexof.call

extracted_from_files

Domain
detected Domain: push.call

XIOC detected Domain: push.call

extracted_from_files

Domain
detected Domain: support.style

XIOC detected Domain: support.style

extracted_from_files

Domain
detected Domain: a.style

XIOC detected Domain: a.style

extracted_from_files

Domain
detected Domain: jquery.support

XIOC detected Domain: jquery.support

extracted_from_files

Domain
detected Domain: func.call

XIOC detected Domain: func.call

extracted_from_files

Domain
detected Domain: pop.call

XIOC detected Domain: pop.call

extracted_from_files

Domain
detected Domain: matches.call

XIOC detected Domain: matches.call

extracted_from_files

Domain
detected Domain: parent.top

XIOC detected Domain: parent.top

extracted_from_files

Domain
detected Domain: jquery.attrhooks.style

XIOC detected Domain: jquery.attrhooks.style

extracted_from_files

Domain
detected Domain: jquery.support.style

XIOC detected Domain: jquery.support.style

extracted_from_files

Domain
detected Domain: jquery.expr.attrhandle.name

XIOC detected Domain: jquery.expr.attrhandle.name

extracted_from_files

Domain
detected Domain: jquery.expr.attrhandle.id

XIOC detected Domain: jquery.expr.attrhandle.id

extracted_from_files

Domain
detected Domain: hooks.empty.fire

XIOC detected Domain: hooks.empty.fire

extracted_from_files

Domain
detected Domain: thiscache.data

XIOC detected Domain: thiscache.data

extracted_from_files

Domain
detected Domain: jquery.data

XIOC detected Domain: jquery.data

extracted_from_files

Domain
detected Domain: event.target

XIOC detected Domain: event.target

extracted_from_files

Domain
detected Domain: special.teardown.call

XIOC detected Domain: special.teardown.call

extracted_from_files

Domain
detected Domain: special.remove.call

XIOC detected Domain: special.remove.call

extracted_from_files

Domain
detected Domain: jquery.event.global

XIOC detected Domain: jquery.event.global

extracted_from_files

Domain
detected Domain: special.add.call

XIOC detected Domain: special.add.call

extracted_from_files

Domain
detected Domain: special.setup.call

XIOC detected Domain: special.setup.call

extracted_from_files

Domain
detected Domain: elemdata.events

XIOC detected Domain: elemdata.events

extracted_from_files

Domain
detected Domain: jquery.event.dispatch.call

XIOC detected Domain: jquery.event.dispatch.call

extracted_from_files

Domain
detected Domain: this.click

XIOC detected Domain: this.click

extracted_from_files

Domain
detected Domain: special.postdispatch.call

XIOC detected Domain: special.postdispatch.call

extracted_from_files

Domain
detected Domain: handleobj.data

XIOC detected Domain: handleobj.data

extracted_from_files

Domain
detected Domain: event.data

XIOC detected Domain: event.data

extracted_from_files

Domain
detected Domain: jquery.event.handlers.call

XIOC detected Domain: jquery.event.handlers.call

extracted_from_files

Domain
detected Domain: special.predispatch.call

XIOC detected Domain: special.predispatch.call

extracted_from_files

Domain
detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain
detected Domain: wrapmap.td

XIOC detected Domain: wrapmap.td

extracted_from_files

Domain
detected Domain: wrapmap.th

XIOC detected Domain: wrapmap.th

extracted_from_files

IP
detected IP: ed::

XIOC detected IP: ed::

extracted_from_files

IP
detected IP: e::

XIOC detected IP: e::

extracted_from_files

IP
detected IP: ::f

XIOC detected IP: ::f

extracted_from_files

Domain
detected Domain: jquery.now

XIOC detected Domain: jquery.now

extracted_from_files

Domain
detected Domain: jquery.style

XIOC detected Domain: jquery.style

extracted_from_files

Domain
detected Domain: wrap.map

XIOC detected Domain: wrap.map

extracted_from_files

Domain
detected Domain: html.call

XIOC detected Domain: html.call

extracted_from_files

Domain
detected Domain: data.events

XIOC detected Domain: data.events

extracted_from_files

Domain
detected Domain: curdata.data

XIOC detected Domain: curdata.data

extracted_from_files

Domain
detected Domain: curdata.events

XIOC detected Domain: curdata.events

extracted_from_files

Domain
detected Domain: olddata.events

XIOC detected Domain: olddata.events

extracted_from_files

Domain
detected Domain: s.beforesend.call

XIOC detected Domain: s.beforesend.call

extracted_from_files

Domain
detected Domain: s.global

XIOC detected Domain: s.global

extracted_from_files

Domain
detected Domain: jqxhr.fail

XIOC detected Domain: jqxhr.fail

extracted_from_files

Domain
detected Domain: s.data

XIOC detected Domain: s.data

extracted_from_files

Domain
detected Domain: elem.name

XIOC detected Domain: elem.name

extracted_from_files

Domain
detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain
detected Domain: this.show

XIOC detected Domain: this.show

extracted_from_files

Domain
detected Domain: tween.elem.style

XIOC detected Domain: tween.elem.style

extracted_from_files

Domain
detected Domain: this.options.step.call

XIOC detected Domain: this.options.step.call

extracted_from_files

Domain
detected Domain: this.now

XIOC detected Domain: this.now

extracted_from_files

Domain
detected Domain: animation.opts.fail

XIOC detected Domain: animation.opts.fail

extracted_from_files

Domain
detected Domain: animation.opts.start.call

XIOC detected Domain: animation.opts.start.call

extracted_from_files

Domain
detected Domain: xhr.open

XIOC detected Domain: xhr.open

extracted_from_files

Domain
detected Domain: response.data

XIOC detected Domain: response.data

extracted_from_files

Domain
detected Domain: curposition.top

XIOC detected Domain: curposition.top

extracted_from_files

Domain
detected Domain: box.top

XIOC detected Domain: box.top

extracted_from_files

Domain
detected Domain: opt.old.call

XIOC detected Domain: opt.old.call

extracted_from_files

Domain
detected Domain: jquery.fx.off

XIOC detected Domain: jquery.fx.off

extracted_from_files

Domain
detected Domain: finish.call

XIOC detected Domain: finish.call

extracted_from_files

Domain
detected Domain: hooks.stop.call

XIOC detected Domain: hooks.stop.call

extracted_from_files

Domain
detected Domain: tween.now

XIOC detected Domain: tween.now

extracted_from_files

Domain
detected Domain: offset.top

XIOC detected Domain: offset.top

extracted_from_files

Domain
detected Domain: parentoffset.top

XIOC detected Domain: parentoffset.top

extracted_from_files

Domain
detected Domain: options.using.call

XIOC detected Domain: options.using.call

extracted_from_files

Domain
detected Domain: curoffset.top

XIOC detected Domain: curoffset.top

extracted_from_files

Domain
detected Domain: props.top

XIOC detected Domain: props.top

extracted_from_files

Domain
detected Domain: options.top

XIOC detected Domain: options.top

extracted_from_files

Domain
detected Domain: options.call

XIOC detected Domain: options.call

extracted_from_files

Domain
detected Domain: jconfirmbox.click

XIOC detected Domain: jconfirmbox.click

extracted_from_files

Domain
detected Domain: scrollpane.click

XIOC detected Domain: scrollpane.click

extracted_from_files

Domain
detected Domain: that.open

XIOC detected Domain: that.open

extracted_from_files

Domain
detected Domain: div.jconfirm-content-pane.no

XIOC detected Domain: div.jconfirm-content-pane.no

extracted_from_files

IP
detected Domain: www.craftpip.com

XIOC detected Domain: www.craftpip.com

extracted_from_files

IP
detected Domain: craftpip.com

XIOC detected Domain: craftpip.com

extracted_from_files

IP
detected Domain: craftpip.github.io

XIOC detected Domain: craftpip.github.io

extracted_from_files

Domain
detected Domain: bugs.jqueryui.com

XIOC detected Domain: bugs.jqueryui.com

extracted_from_files

Domain
detected Domain: jqueryui.com

XIOC detected Domain: jqueryui.com

extracted_from_files

Domain
detected Domain: this.open

XIOC detected Domain: this.open

extracted_from_files

Domain
detected Domain: console.info

XIOC detected Domain: console.info

extracted_from_files

Domain
detected Domain: titlecontainer.show

XIOC detected Domain: titlecontainer.show

extracted_from_files

Domain
detected Domain: closeicon.show

XIOC detected Domain: closeicon.show

extracted_from_files

Domain
detected Domain: closeicon.click

XIOC detected Domain: closeicon.click

extracted_from_files

Domain
detected Domain: removedata.call

XIOC detected Domain: removedata.call

extracted_from_files

Domain
detected Domain: map.name

XIOC detected Domain: map.name

extracted_from_files

Domain
detected Domain: this.id

XIOC detected Domain: this.id

extracted_from_files

Domain
detected Domain: ui.ie

XIOC detected Domain: ui.ie

extracted_from_files

Domain
detected Domain: dev.jquery.com

XIOC detected Domain: dev.jquery.com

extracted_from_files

Domain
detected Domain: www.robertpenner.com

XIOC detected Domain: www.robertpenner.com

extracted_from_files

Domain
detected Domain: code.google.com

XIOC detected Domain: code.google.com

extracted_from_files

Domain
detected Domain: offsets.my

XIOC detected Domain: offsets.my

extracted_from_files

Domain
detected Domain: offsets.at

XIOC detected Domain: offsets.at

extracted_from_files

Domain
detected Domain: baseposition.top

XIOC detected Domain: baseposition.top

extracted_from_files

Domain
detected Domain: options.at

XIOC detected Domain: options.at

extracted_from_files

Domain
detected Domain: mousedownevent.target

XIOC detected Domain: mousedownevent.target

extracted_from_files

Domain
detected Domain: foo.bar

XIOC detected Domain: foo.bar

extracted_from_files

Domain
detected Domain: element.style

XIOC detected Domain: element.style

extracted_from_files

Domain
detected Domain: testelement.style

XIOC detected Domain: testelement.style

extracted_from_files

Domain
detected Domain: data.at

XIOC detected Domain: data.at

extracted_from_files

Domain
detected Domain: data.my

XIOC detected Domain: data.my

extracted_from_files

Domain
detected Domain: within.offset.top

XIOC detected Domain: within.offset.top

extracted_from_files

Domain
detected Domain: targetoffset.top

XIOC detected Domain: targetoffset.top

extracted_from_files

Domain
detected Domain: position.top

XIOC detected Domain: position.top

extracted_from_files

Domain
detected Domain: options.my

XIOC detected Domain: options.my

extracted_from_files

Domain
detected Domain: toshow.show

XIOC detected Domain: toshow.show

extracted_from_files

Domain
detected Domain: active.next

XIOC detected Domain: active.next

extracted_from_files

Domain
detected Domain: clicked.next

XIOC detected Domain: clicked.next

extracted_from_files

Domain
detected Domain: header.next

XIOC detected Domain: header.next

extracted_from_files

Domain
detected Domain: keycode.space

XIOC detected Domain: keycode.space

extracted_from_files

Domain
detected Domain: this.headers.next

XIOC detected Domain: this.headers.next

extracted_from_files

Domain
detected Domain: this.active.next

XIOC detected Domain: this.active.next

extracted_from_files

Domain
detected Domain: this.document.one

XIOC detected Domain: this.document.one

extracted_from_files

Domain
detected Domain: this.menu

XIOC detected Domain: this.menu

extracted_from_files

Domain
detected Domain: this.menu.element.is

XIOC detected Domain: this.menu.element.is

extracted_from_files

Domain
detected Domain: keycode.tab

XIOC detected Domain: keycode.tab

extracted_from_files

Domain
detected Domain: this.menu.select

XIOC detected Domain: this.menu.select

extracted_from_files

Domain
detected Domain: keycode.page

XIOC detected Domain: keycode.page

extracted_from_files

Domain
detected Domain: fx.now

XIOC detected Domain: fx.now

extracted_from_files

Domain
detected Domain: ui.keycode.space

XIOC detected Domain: ui.keycode.space

extracted_from_files

Domain
detected Domain: that.document.one

XIOC detected Domain: that.document.one

extracted_from_files

Domain
detected Domain: radio.name

XIOC detected Domain: radio.name

extracted_from_files

Domain
detected Domain: this.menu.next

XIOC detected Domain: this.menu.next

extracted_from_files

Domain
detected Domain: ul.show

XIOC detected Domain: ul.show

extracted_from_files

Domain
detected Domain: this.search

XIOC detected Domain: this.search

extracted_from_files

Domain
detected Domain: ui.item.data

XIOC detected Domain: ui.item.data

extracted_from_files

Domain
detected Domain: input.target

XIOC detected Domain: input.target

extracted_from_files

Domain
detected Domain: inst.dpdiv.is

XIOC detected Domain: inst.dpdiv.is

extracted_from_files

Domain
detected Domain: inst.dpdiv.show

XIOC detected Domain: inst.dpdiv.show

extracted_from_files

Domain
detected Domain: inst.trigger.click

XIOC detected Domain: inst.trigger.click

extracted_from_files

Domain
detected Domain: target.id

XIOC detected Domain: target.id

extracted_from_files

Domain
detected Domain: this.element.is

XIOC detected Domain: this.element.is

extracted_from_files

Domain
detected Domain: this.buttonelement.is

XIOC detected Domain: this.buttonelement.is

extracted_from_files

Domain
detected Domain: props.click

XIOC detected Domain: props.click

extracted_from_files

Domain
detected Domain: sp.top

XIOC detected Domain: sp.top

extracted_from_files

Domain
detected Domain: this.offset.click.top

XIOC detected Domain: this.offset.click.top

extracted_from_files

Domain
detected Domain: this.options.show

XIOC detected Domain: this.options.show

extracted_from_files

Domain
detected Domain: pos.top

XIOC detected Domain: pos.top

extracted_from_files

Domain
detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain
detected Domain: inst.input.is

XIOC detected Domain: inst.input.is

extracted_from_files

Domain
detected Domain: this.margins.top

XIOC detected Domain: this.margins.top

extracted_from_files

Domain
detected Domain: this.offset.top

XIOC detected Domain: this.offset.top

extracted_from_files

Domain
detected Domain: this.element.show

XIOC detected Domain: this.element.show

extracted_from_files

Domain
detected Domain: uidialog.is

XIOC detected Domain: uidialog.is

extracted_from_files

Domain
detected Domain: this.uidialog.show

XIOC detected Domain: this.uidialog.show

extracted_from_files

Domain
detected Domain: this.uidialog.is

XIOC detected Domain: this.uidialog.is

extracted_from_files

Domain
detected Domain: ui.position.top

XIOC detected Domain: ui.position.top

extracted_from_files

Domain
detected Domain: obj.top

XIOC detected Domain: obj.top

extracted_from_files

Domain
detected Domain: this.helper.is

XIOC detected Domain: this.helper.is

extracted_from_files

Domain
detected Domain: mouseup.call

XIOC detected Domain: mouseup.call

extracted_from_files

Domain
detected Domain: this.options.revert.call

XIOC detected Domain: this.options.revert.call

extracted_from_files

Domain
detected Domain: this.position.top

XIOC detected Domain: this.position.top

extracted_from_files

Domain
detected Domain: style.top

XIOC detected Domain: style.top

extracted_from_files

Domain
detected Domain: ui.plugin.call

XIOC detected Domain: ui.plugin.call

extracted_from_files

Domain
detected Domain: co.top

XIOC detected Domain: co.top

extracted_from_files

Domain
detected Domain: this.offset.scroll.top

XIOC detected Domain: this.offset.scroll.top

extracted_from_files

Domain
detected Domain: this.offset.parent.top

XIOC detected Domain: this.offset.parent.top

extracted_from_files

Domain
detected Domain: this.offset.relative.top

XIOC detected Domain: this.offset.relative.top

extracted_from_files

Domain
detected Domain: p.top

XIOC detected Domain: p.top

extracted_from_files

Domain
detected Domain: po.top

XIOC detected Domain: po.top

extracted_from_files

Domain
detected Domain: inst.offset.parent.top

XIOC detected Domain: inst.offset.parent.top

extracted_from_files

Domain
detected Domain: this.instance.offset.parent.top

XIOC detected Domain: this.instance.offset.parent.top

extracted_from_files

Domain
detected Domain: inst.offset.click.top

XIOC detected Domain: inst.offset.click.top

extracted_from_files

Domain
detected Domain: this.instance.offset.click.top

XIOC detected Domain: this.instance.offset.click.top

extracted_from_files

Domain
detected Domain: inst.offset.click

XIOC detected Domain: inst.offset.click

extracted_from_files

Domain
detected Domain: this.instance.offset.click

XIOC detected Domain: this.instance.offset.click

extracted_from_files

Domain
detected Domain: trigger.call

XIOC detected Domain: trigger.call

extracted_from_files

Domain
detected Domain: this.data

XIOC detected Domain: this.data

extracted_from_files

Domain
detected Domain: inst.options.snap.snap.call

XIOC detected Domain: inst.options.snap.snap.call

extracted_from_files

Domain
detected Domain: inst.margins.top

XIOC detected Domain: inst.margins.top

extracted_from_files

Domain
detected Domain: inst.options.snap.release.call

XIOC detected Domain: inst.options.snap.release.call

extracted_from_files

Domain
detected Domain: ui.offset.top

XIOC detected Domain: ui.offset.top

extracted_from_files

Domain
detected Domain: o.top

XIOC detected Domain: o.top

extracted_from_files

Domain
detected Domain: i.overflowoffset.top

XIOC detected Domain: i.overflowoffset.top

extracted_from_files

Domain
detected Domain: activate.call

XIOC detected Domain: activate.call

extracted_from_files

Domain
detected Domain: accept.call

XIOC detected Domain: accept.call

extracted_from_files

Domain
detected Domain: draggable.offset.click

XIOC detected Domain: draggable.offset.click

extracted_from_files

Domain
detected Domain: droppable.offset.top

XIOC detected Domain: droppable.offset.top

extracted_from_files

Domain
detected Domain: inst.accept.call

XIOC detected Domain: inst.accept.call

extracted_from_files

Domain
detected Domain: this.accept.call

XIOC detected Domain: this.accept.call

extracted_from_files

Domain
detected Domain: d.is

XIOC detected Domain: d.is

extracted_from_files

Domain
detected Domain: space.to

XIOC detected Domain: space.to

extracted_from_files

Domain
detected Domain: parser.space

XIOC detected Domain: parser.space

extracted_from_files

Domain
detected Domain: color.support

XIOC detected Domain: color.support

extracted_from_files

Domain
detected Domain: over.call

XIOC detected Domain: over.call

extracted_from_files

Domain
detected Domain: out.call

XIOC detected Domain: out.call

extracted_from_files

Domain
detected Domain: deactivate.call

XIOC detected Domain: deactivate.call

extracted_from_files

Domain
detected Domain: drop.call

XIOC detected Domain: drop.call

extracted_from_files

Domain
detected Domain: element.data

XIOC detected Domain: element.data

extracted_from_files

Domain
detected Domain: effects.animateclass.call

XIOC detected Domain: effects.animateclass.call

extracted_from_files

Domain
detected Domain: o.complete.call

XIOC detected Domain: o.complete.call

extracted_from_files

Domain
detected Domain: allanimations.map

XIOC detected Domain: allanimations.map

extracted_from_files

Domain
detected Domain: curelem.style

XIOC detected Domain: curelem.style

extracted_from_files

Domain
detected Domain: spaces.hsla.to

XIOC detected Domain: spaces.hsla.to

extracted_from_files

Domain
detected Domain: hue2rgb.as

XIOC detected Domain: hue2rgb.as

extracted_from_files

Domain
detected Domain: effectmethod.call

XIOC detected Domain: effectmethod.call

extracted_from_files

Domain
detected Domain: elem.is

XIOC detected Domain: elem.is

extracted_from_files

Domain
detected Domain: complete.call

XIOC detected Domain: complete.call

extracted_from_files

Domain
detected Domain: args.complete.call

XIOC detected Domain: args.complete.call

extracted_from_files

Domain
detected Domain: fx.off

XIOC detected Domain: fx.off

extracted_from_files

Domain
detected Domain: active.id

XIOC detected Domain: active.id

extracted_from_files

Domain
detected Domain: el.is

XIOC detected Domain: el.is

extracted_from_files

Domain
detected Domain: el.to

XIOC detected Domain: el.to

extracted_from_files

Domain
detected Domain: o.to

XIOC detected Domain: o.to

extracted_from_files

Domain
detected Domain: options.to

XIOC detected Domain: options.to

extracted_from_files

Domain
detected Domain: el.show

XIOC detected Domain: el.show

extracted_from_files

Domain
detected Domain: effects.save

XIOC detected Domain: effects.save

extracted_from_files

Domain
detected Domain: fn.show

XIOC detected Domain: fn.show

extracted_from_files

Domain
detected Domain: this.effect.call

XIOC detected Domain: this.effect.call

extracted_from_files

Domain
detected Domain: ui.menu

XIOC detected Domain: ui.menu

extracted_from_files

Domain
detected Domain: startposition.top

XIOC detected Domain: startposition.top

extracted_from_files

Domain
detected Domain: endposition.top

XIOC detected Domain: endposition.top

extracted_from_files

Domain
detected Domain: child.to

XIOC detected Domain: child.to

extracted_from_files

Domain
detected Domain: el.to.top

XIOC detected Domain: el.to.top

extracted_from_files

Domain
detected Domain: el.from.top

XIOC detected Domain: el.from.top

extracted_from_files

Domain
detected Domain: factor.to

XIOC detected Domain: factor.to

extracted_from_files

Domain
detected Domain: handles.show

XIOC detected Domain: handles.show

extracted_from_files

Domain
detected Domain: this.element.data

XIOC detected Domain: this.element.data

extracted_from_files

Domain
detected Domain: this.active.is

XIOC detected Domain: this.active.is

extracted_from_files

Domain
detected Domain: this.next

XIOC detected Domain: this.next

extracted_from_files

Domain
detected Domain: ui.keycode.page

XIOC detected Domain: ui.keycode.page

extracted_from_files

Domain
detected Domain: elem.data

XIOC detected Domain: elem.data

extracted_from_files

Domain
detected Domain: this.select

XIOC detected Domain: this.select

extracted_from_files

Domain
detected Domain: this.elementoffset.top

XIOC detected Domain: this.elementoffset.top

extracted_from_files

Domain
detected Domain: cpos.top

XIOC detected Domain: cpos.top

extracted_from_files

Domain
detected Domain: data.top

XIOC detected Domain: data.top

extracted_from_files

Domain
detected Domain: that.originalposition.top

XIOC detected Domain: that.originalposition.top

extracted_from_files

Domain
detected Domain: that.position.top

XIOC detected Domain: that.position.top

extracted_from_files

Domain
detected Domain: event.pagey-smp.top

XIOC detected Domain: event.pagey-smp.top

extracted_from_files

IP
detected Domain: inipos.top

XIOC detected Domain: inipos.top

extracted_from_files

Domain
detected Domain: op.top

XIOC detected Domain: op.top

extracted_from_files

Domain
detected Domain: el.data

XIOC detected Domain: el.data

extracted_from_files

Domain
detected Domain: cop.top

XIOC detected Domain: cop.top

extracted_from_files

Domain
detected Domain: that.parentdata.top

XIOC detected Domain: that.parentdata.top

extracted_from_files

URL
detected URL: https://github.com/Harshil-Kaneria/VS-Code-Tasklist/issues

XIOC detected URL: https://github.com/Harshil-Kaneria/VS-Code-Tasklist/issues

extracted_from_files

URL
detected URL: https://github.com/Harshil-Kaneria/VS-Code-Tasklist.git

XIOC detected URL: https://github.com/Harshil-Kaneria/VS-Code-Tasklist.git

extracted_from_files

IP
detected IP: 1.42.71.71

XIOC detected IP: 1.42.71.71

extracted_from_files

Domain
detected Domain: this.positionabs.top

XIOC detected Domain: this.positionabs.top

extracted_from_files

Domain
detected Domain: this.currentitem.show

XIOC detected Domain: this.currentitem.show

extracted_from_files

Domain
detected Domain: cur.top

XIOC detected Domain: cur.top

extracted_from_files

Domain
detected Domain: animation.top

XIOC detected Domain: animation.top

extracted_from_files

Domain
detected Domain: this.overflowoffset.top

XIOC detected Domain: this.overflowoffset.top

extracted_from_files

Domain
detected Domain: clickoffset.top

XIOC detected Domain: clickoffset.top

extracted_from_files

Domain
detected Domain: selectee.top

XIOC detected Domain: selectee.top

extracted_from_files

Domain
detected Domain: containercache.top

XIOC detected Domain: containercache.top

extracted_from_files

Domain
detected Domain: this.options.custom.refreshcontainers.call

XIOC detected Domain: this.options.custom.refreshcontainers.call

extracted_from_files

Domain
detected Domain: item.data

XIOC detected Domain: item.data

extracted_from_files

Domain
detected Domain: this.options.items.call

XIOC detected Domain: this.options.items.call

extracted_from_files

Domain
detected Domain: inst.options.items.call

XIOC detected Domain: inst.options.items.call

extracted_from_files

Domain
detected Domain: this.lastpositionabs.top

XIOC detected Domain: this.lastpositionabs.top

extracted_from_files

Domain
detected Domain: item.top

XIOC detected Domain: item.top

extracted_from_files

Domain
detected Domain: that.options.show

XIOC detected Domain: that.options.show

extracted_from_files

Domain
detected Domain: tab.data

XIOC detected Domain: tab.data

extracted_from_files

Domain
detected Domain: this.tabs.map

XIOC detected Domain: this.tabs.map

extracted_from_files

Domain
detected Domain: this.options.page

XIOC detected Domain: this.options.page

extracted_from_files

Domain
detected Domain: options.page

XIOC detected Domain: options.page

extracted_from_files

Domain
detected Domain: this.offset.click

XIOC detected Domain: this.offset.click

extracted_from_files

Domain
detected Domain: o.placeholder.element.call

XIOC detected Domain: o.placeholder.element.call

extracted_from_files

Domain
detected Domain: contentoption.call

XIOC detected Domain: contentoption.call

extracted_from_files

Domain
detected Domain: blurevent.target

XIOC detected Domain: blurevent.target

extracted_from_files

Domain
detected Domain: parent.data

XIOC detected Domain: parent.data

extracted_from_files

Domain
detected Domain: target.data

XIOC detected Domain: target.data

extracted_from_files

Domain
detected Domain: element.is

XIOC detected Domain: element.is

extracted_from_files

Domain
detected Domain: this.panels.show

XIOC detected Domain: this.panels.show

extracted_from_files

Domain
detected Domain: li.data

XIOC detected Domain: li.data

extracted_from_files

Domain
detected Domain: microsoft.visualstudio.services.links.support

XIOC detected Domain: microsoft.visualstudio.services.links.support

extracted_from_files

Domain
detected Domain: schemas.microsoft.com

XIOC detected Domain: schemas.microsoft.com

extracted_from_files

Domain
detected Domain: ele.id

XIOC detected Domain: ele.id

extracted_from_files

Domain
detected Domain: item.id

XIOC detected Domain: item.id

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

IP
detected Domain: tooltip.is

XIOC detected Domain: tooltip.is

extracted_from_files

Domain
detected Domain: target.is

XIOC detected Domain: target.is

extracted_from_files

URL
detected URL: https://raw.githubusercontent.com/Harshil-Kaneria/VS-Code-Tasklist/main/img/tl3.png)

XIOC detected URL: https://raw.githubusercontent.com/Harshil-Kaneria/VS-Code-Tasklist/main/img/tl3.png)

extracted_from_files

URL
detected URL: https://raw.githubusercontent.com/Harshil-Kaneria/VS-Code-Tasklist/main/img/tl_both.png)

XIOC detected URL: https://raw.githubusercontent.com/Harshil-Kaneria/VS-Code-Tasklist/main/img/tl_both.png)

extracted_from_files

URL
detected URL: http://keepachangelog.com/)

XIOC detected URL: http://keepachangelog.com/)

extracted_from_files

URL
detected URL: http://schemas.openxmlformats.org/package/2006/content-types

XIOC detected URL: http://schemas.openxmlformats.org/package/2006/content-types

extracted_from_files

IP
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Domain
detected Domain: changelog.md

XIOC detected Domain: changelog.md

extracted_from_files

Domain
detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

URL
detected URL: http://jquery.org/license

XIOC detected URL: http://jquery.org/license

extracted_from_files

URL
detected URL: http://sizzlejs.com/

XIOC detected URL: http://sizzlejs.com/

extracted_from_files

URL
detected URL: http://jquery.com/

XIOC detected URL: http://jquery.com/

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg'

XIOC detected URL: http://www.w3.org/2000/svg'

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/blob/main/LICENSE)

XIOC detected URL: https://github.com/twbs/bootstrap/blob/main/LICENSE)

extracted_from_files

URL
detected URL: https://getbootstrap.com/)

XIOC detected URL: https://getbootstrap.com/)

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

URL
detected URL: http://www.w3.org/TR/css3-selectors/#attribute-selectors

XIOC detected URL: http://www.w3.org/TR/css3-selectors/#attribute-selectors

extracted_from_files

URL
detected URL: http://www.w3.org/TR/css3-syntax/#characters

XIOC detected URL: http://www.w3.org/TR/css3-syntax/#characters

extracted_from_files

URL
detected URL: http://www.w3.org/TR/css3-selectors/#whitespace

XIOC detected URL: http://www.w3.org/TR/css3-selectors/#whitespace

extracted_from_files

URL
detected URL: http://javascript.nwbox.com/IEContentLoaded/

XIOC detected URL: http://javascript.nwbox.com/IEContentLoaded/

extracted_from_files

URL
detected URL: http://bugs.jquery.com/ticket/12282#comment:15

XIOC detected URL: http://bugs.jquery.com/ticket/12282#comment:15

extracted_from_files

URL
detected URL: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context

XIOC detected URL: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context

extracted_from_files

URL
detected URL: http://json.org/json2.js

XIOC detected URL: http://json.org/json2.js

extracted_from_files

URL
detected URL: http://www.w3.org/TR/selectors/#pseudo-classes

XIOC detected URL: http://www.w3.org/TR/selectors/#pseudo-classes

extracted_from_files

URL
detected URL: http://www.w3.org/TR/2011/REC-css3-selectors-20110929/#checked

XIOC detected URL: http://www.w3.org/TR/2011/REC-css3-selectors-20110929/#checked

extracted_from_files

URL
detected URL: http://bugs.jquery.com/ticket/12359

XIOC detected URL: http://bugs.jquery.com/ticket/12359

extracted_from_files

URL
detected URL: http://bugs.jquery.com/ticket/13378

XIOC detected URL: http://bugs.jquery.com/ticket/13378

extracted_from_files

URL
detected URL: http://www.w3.org/TR/CSS21/syndata.html#escaped-characters

XIOC detected URL: http://www.w3.org/TR/CSS21/syndata.html#escaped-characters

extracted_from_files

URL
detected URL: http://www.w3.org/TR/selectors/#attribute-selectors

XIOC detected URL: http://www.w3.org/TR/selectors/#attribute-selectors

extracted_from_files

URL
detected URL: http://www.w3.org/TR/CSS21/syndata.html#value-def-identifier

XIOC detected URL: http://www.w3.org/TR/CSS21/syndata.html#value-def-identifier

extracted_from_files

URL
detected URL: http://www.w3.org/TR/2003/WD-DOM-Level-3-Events-20030331/ecma-script-binding.html

XIOC detected URL: http://www.w3.org/TR/2003/WD-DOM-Level-3-Events-20030331/ecma-script-binding.html

extracted_from_files

URL
detected URL: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript/

XIOC detected URL: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript/

extracted_from_files

URL
detected URL: http://blindsignals.com/index.php/2009/07/jquery-delay/

XIOC detected URL: http://blindsignals.com/index.php/2009/07/jquery-delay/

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en/Security/CSP)

XIOC detected URL: https://developer.mozilla.org/en/Security/CSP)

extracted_from_files

URL
detected URL: http://msdn.microsoft.com/en-us/library/ms536429%28VS.85%29.aspx

XIOC detected URL: http://msdn.microsoft.com/en-us/library/ms536429%28VS.85%29.aspx

extracted_from_files

URL
detected URL: http://www.w3.org/TR/selectors/#empty-pseudo

XIOC detected URL: http://www.w3.org/TR/selectors/#empty-pseudo

extracted_from_files

URL
detected URL: http://www.w3.org/TR/selectors/#lang-pseudo

XIOC detected URL: http://www.w3.org/TR/selectors/#lang-pseudo

extracted_from_files

URL
detected URL: https://bugs.webkit.org/show_bug.cgi?id=29084

XIOC detected URL: https://bugs.webkit.org/show_bug.cgi?id=29084

extracted_from_files

URL
detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=491668

XIOC detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=491668

extracted_from_files

URL
detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=649285

XIOC detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=649285

extracted_from_files

URL
detected URL: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291

XIOC detected URL: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291

extracted_from_files

URL
detected URL: http://dev.w3.org/csswg/cssom/#resolved-values

XIOC detected URL: http://dev.w3.org/csswg/cssom/#resolved-values

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/CSS/display

XIOC detected URL: https://developer.mozilla.org/en-US/docs/CSS/display

extracted_from_files

URL
detected URL: http://jsperf.com/getall-vs-sizzle/2

XIOC detected URL: http://jsperf.com/getall-vs-sizzle/2

extracted_from_files

URL
detected URL: http://bugs.jquery.com/ticket/9413)

XIOC detected URL: http://bugs.jquery.com/ticket/9413)

extracted_from_files

URL
detected URL: http://jqueryui.com

XIOC detected URL: http://jqueryui.com

extracted_from_files

URL
detected URL: https://github.com/umdjs/umd

XIOC detected URL: https://github.com/umdjs/umd

extracted_from_files

URL
detected URL: https://github.com/craftpip/jquery-confirm/blob/master/LICENSE)

XIOC detected URL: https://github.com/craftpip/jquery-confirm/blob/master/LICENSE)

extracted_from_files

URL
detected URL: http://craftpip.github.io/jquery-confirm/)

XIOC detected URL: http://craftpip.github.io/jquery-confirm/)

extracted_from_files

URL
detected URL: https://github.com/jquery/jquery/pull/764

XIOC detected URL: https://github.com/jquery/jquery/pull/764

extracted_from_files

URL
detected URL: http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_AVAILABLE)

XIOC detected URL: http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_AVAILABLE)

extracted_from_files

URL
detected URL: http://bugs.jquery.com/ticket/9917

XIOC detected URL: http://bugs.jquery.com/ticket/9917

extracted_from_files

URL
detected URL: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RGB.as?r=5021

XIOC detected URL: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RGB.as?r=5021

extracted_from_files

URL
detected URL: https://github.com/jquery/jquery-color

XIOC detected URL: https://github.com/jquery/jquery-color

extracted_from_files

URL
detected URL: https://bugs.webkit.org/show_bug.cgi?id=47182

XIOC detected URL: https://bugs.webkit.org/show_bug.cgi?id=47182

extracted_from_files

URL
detected URL: http://bugs.jqueryui.com/ticket/7552

XIOC detected URL: http://bugs.jqueryui.com/ticket/7552

extracted_from_files

URL
detected URL: http://bugs.jquery.com/ticket/9413

XIOC detected URL: http://bugs.jquery.com/ticket/9413

extracted_from_files

URL
detected URL: http://bugs.jquery.com/ticket/8235

XIOC detected URL: http://bugs.jquery.com/ticket/8235

extracted_from_files

URL
detected URL: http://schemas.microsoft.com/developer/vsx-schema-design/2011

XIOC detected URL: http://schemas.microsoft.com/developer/vsx-schema-design/2011

extracted_from_files

URL
detected URL: http://schemas.microsoft.com/developer/vsx-schema/2011

XIOC detected URL: http://schemas.microsoft.com/developer/vsx-schema/2011

extracted_from_files

URL
detected URL: https://github.com/Harshil-Kaneria/VS-Code-Tasklist

XIOC detected URL: https://github.com/Harshil-Kaneria/VS-Code-Tasklist

extracted_from_files

URL
detected URL: http://bugs.jquery.com/ticket/11778

XIOC detected URL: http://bugs.jquery.com/ticket/11778

extracted_from_files

URL
detected URL: http://dev.jquery.com/ticket/1749

XIOC detected URL: http://dev.jquery.com/ticket/1749

extracted_from_files

URL
detected URL: http://www.robertpenner.com/easing)

XIOC detected URL: http://www.robertpenner.com/easing)

extracted_from_files

URL
detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=561664

XIOC detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=561664

extracted_from_files

URL
detected URL: https://github.com/Harshil-Kaneria/VS-Code-Tasklist#readme

XIOC detected URL: https://github.com/Harshil-Kaneria/VS-Code-Tasklist#readme

extracted_from_files

Domain
detected Domain: that.offset.top

XIOC detected Domain: that.offset.top

extracted_from_files

Domain
detected Domain: cp.top

XIOC detected Domain: cp.top

extracted_from_files

Domain
detected Domain: qualifier.call

XIOC detected Domain: qualifier.call

extracted_from_files

Domain
detected Domain: checkfocus.call

XIOC detected Domain: checkfocus.call

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Tasklist is a Visual Studio Code Marketplace extension published by Harshil-Kaneria. Version 1.0.3 has been analyzed by the Risky Plugins security platform, receiving a risk score of 64.94/100 (MEDIUM risk) based on 442 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • High: 26 finding(s)
  • Medium: 416 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Tasklist is published by Harshil-Kaneria on the Visual Studio Code Marketplace marketplace. The extension has approximately 1K users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions