HIGH RISK NaN/100

Neevio AI Pre-Execution Code Impact Analysis

Unknown developer

Threat Summary

Risk Level
Critical Issues
High Issues
Total Findings

Key Security Threats

HIGH Malware Signature

YARA rule match: -postinstall_system_command

/tmp/extract-c15732e537fd84558cf82e9566cadd789cd4331a3a7a7e8ecc0f2b12b17834b7-4037555027/extension/dist/promptBuilder.js

HIGH Malware Signature

YARA rule match: -postinstall_file_download

/tmp/extract-c15732e537fd84558cf82e9566cadd789cd4331a3a7a7e8ecc0f2b12b17834b7-4037555027/extension/changelog.md

HIGH Malware Signature

YARA rule match: -postinstall_system_command

/tmp/extract-c15732e537fd84558cf82e9566cadd789cd4331a3a7a7e8ecc0f2b12b17834b7-4037555027/extension/changelog.md

HIGH Malware Signature

YARA rule match: -postinstall_system_command

/tmp/extract-c15732e537fd84558cf82e9566cadd789cd4331a3a7a7e8ecc0f2b12b17834b7-4037555027/extension.vsixmanifest

HIGH Malware Signature

YARA rule match: -postinstall_file_download

/tmp/extract-c15732e537fd84558cf82e9566cadd789cd4331a3a7a7e8ecc0f2b12b17834b7-4037555027/extension/dist/extension.js

All Findings (90)

View all 90 security findings
Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_file_download

Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_file_download

Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_network_communication

Malware Signature

YARA rule match: -postinstall_obfuscation

Malware Signature

YARA rule match: -postinstall_obfuscation

Malware Signature

YARA rule match: -postinstall_file_manipulation

Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_file_manipulation

Malware Signature

YARA rule match: -postinstall_file_download

Malware Signature

YARA rule match: -postinstall_file_download

Malware Signature

YARA rule match: -postinstall_network_communication

Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_file_download

Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_file_download

Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_system_command

Malware Signature

YARA rule match: -postinstall_file_download

Indicator of Compromise

XIOC detected URL: https://github.com/makeneevio/neevio/releases)

Indicator of Compromise

XIOC detected Domain: app.neevio.io

Indicator of Compromise

XIOC detected URL: https://app.neevio.io

Indicator of Compromise

XIOC detected URL: https://app.neevio.io

Indicator of Compromise

XIOC detected URL: https://open-vsx.org/extension/neevio/neevio-ai-impact)

Indicator of Compromise

XIOC detected URL: https://github.com/makeneevio/neevio/issues

Indicator of Compromise

XIOC detected URL: https://app.neevio.io

Indicator of Compromise

XIOC detected URL: https://app.neevio.io)

Indicator of Compromise

XIOC detected URL: https://app.neevio.io

Indicator of Compromise

XIOC detected Domain: readme.md

Indicator of Compromise

XIOC detected Domain: changelog.md

Indicator of Compromise

XIOC detected URL: http://schemas.openxmlformats.org/package/2006/content-types

Indicator of Compromise

XIOC detected URL: https://app.neevio.io

Indicator of Compromise

XIOC detected URL: http://json-schema.org/draft-07/schema#

Indicator of Compromise

XIOC detected Domain: auth.js.map

Indicator of Compromise

XIOC detected URL: https://github.com/makeneevio/neevio.git

Indicator of Compromise

XIOC detected Domain: extractjson.js.map

Indicator of Compromise

XIOC detected Domain: validator.d.ts.map

Indicator of Compromise

XIOC detected Domain: validator.js.map

Indicator of Compromise

XIOC detected Domain: github.com

Indicator of Compromise

XIOC detected Domain: open-vsx.org

Indicator of Compromise

XIOC detected Domain: schemas.microsoft.com

Indicator of Compromise

XIOC detected URL: http://schemas.microsoft.com/developer/vsx-schema-design/2011

Indicator of Compromise

XIOC detected Domain: issue.target

Indicator of Compromise

XIOC detected Domain: promptbuilder.js.map

Indicator of Compromise

XIOC detected Domain: json-schema.org

Indicator of Compromise

XIOC detected Domain: neevio.io

Indicator of Compromise

XIOC detected Domain: analysis.d.ts.map

Indicator of Compromise

XIOC detected Domain: analysis.js.map

Indicator of Compromise

XIOC detected Domain: extractjson.d.ts.map

Indicator of Compromise

XIOC detected Domain: extension.js.map

Indicator of Compromise

XIOC detected Domain: resultsprovider.d.ts.map

Indicator of Compromise

XIOC detected Domain: ondidchangetreedata.fire

Indicator of Compromise

XIOC detected Domain: files.map

Indicator of Compromise

XIOC detected Domain: resultsprovider.js.map

Indicator of Compromise

XIOC detected Domain: promptbuilder.d.ts.map

Indicator of Compromise

XIOC detected Domain: issue.name

Indicator of Compromise

XIOC detected Domain: auth.d.ts.map

Indicator of Compromise

XIOC detected Domain: object.prototype.hasownproperty.call

Indicator of Compromise

XIOC detected Domain: context.secrets.store

Indicator of Compromise

XIOC detected Domain: microsoft.visualstudio.services.links.support

Indicator of Compromise

XIOC detected Domain: extension.d.ts.map

Indicator of Compromise

XIOC detected URL: https://github.com/makeneevio/neevio#readme

Indicator of Compromise

XIOC detected Domain: validation.data

Indicator of Compromise

XIOC detected Domain: context.d.ts.map

Indicator of Compromise

XIOC detected Domain: context.js.map

Indicator of Compromise

XIOC detected Domain: resolve.d.ts.map

Indicator of Compromise

XIOC detected Domain: data.id

Indicator of Compromise

XIOC detected Domain: resolve.js.map

Indicator of Compromise

XIOC detected Domain: upload.d.ts.map

Indicator of Compromise

XIOC detected Domain: upload.js.map

Indicator of Compromise

XIOC detected URL: http://schemas.microsoft.com/developer/vsx-schema/2011

Indicator of Compromise

XIOC detected URL: https://github.com/makeneevio/neevio)

Indicator of Compromise

XIOC detected Domain: schemas.openxmlformats.org

Indicator of Compromise

XIOC detected URL: https://neevio.io/schemas/ai-impact-analysis-result.json

Suspicious Network Activity

Network call of type 'fetch' detected.

Suspicious Network Activity

Network call of type 'fetch' detected.

Suspicious Network Activity

Network call of type 'fetch' detected.

metadata

HASH-e6ca359e33ad7e6c

metadata

HASH-8686498c2bd23094

metadata

HASH-523bd77c2a479081

metadata

HASH-36b5f8b5bcf3295c

dependency

Found dependency: ajv@^8.12.0

metadata

HASH-42eaaf10b5788197

metadata

HASH-044177dfcf4c0596

Recommended Action

This extension has significant security concerns that warrant careful review. Consider uninstalling or finding a safer alternative. If you must use it, limit the permissions and monitor for suspicious activity.

View Full Security Report Find Safer Alternatives

Analysis performed on 3/8/2026 · Version unknown

Data sourced from automated security scanning. For detailed analysis, view the full security scorecard.