Is "KylinSDK Document Viewer" on OpenVSX Registry Safe to Install?

Verified
KylinIdeTeam · openvsx · v0.3.0

A VSCode extension that provides integrated documentation support for KylinSDK developers.

Risk Assessment

Analyzed
100
out of 100
CRITICAL

10588 security findings detected across all analyzers

Open VSX extension analyzed via package manifest and static code analysis

Severity Breakdown

0
Critical
3421
High
1995
Medium
0
Low
0
Info

Finding Categories

1000
Malware Signatures

YARA Rules Matched

7 rules(1000 hits)
postinstall file manipulation postinstall crypto operations postinstall system command postinstall network communication postinstall file download postinstall persistence mechanism postinstall obfuscation

About This Extension

A VSCode extension that provides integrated documentation support for KylinSDK developers.

Detailed Findings

1000 total

YARA Rule Matches

7 rules

Security Analysis Summary

Security Analysis Overview

KylinSDK Document Viewer is a OpenVSX Registry extension published by KylinIdeTeam. Version 0.3.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 10588 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 3421 finding(s)
  • Medium: 1995 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

KylinSDK Document Viewer is published by KylinIdeTeam on the OpenVSX Registry marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions