Nexus AI
Unknown developer · 3 users at risk
Threat Summary
All Findings (324)
View all 324 security findings
Network call of type 'fetch' detected.
Network call of type 'fetch' detected.
Network call of type 'fetch' detected.
Network call of type 'fetch' detected.
Network call of type 'fetch' detected.
Network call of type 'fetch' detected.
Network call of type 'fetch' detected.
XIOC detected URL: https://github.com/Hafiz408/Nexus/raw/HEAD/images/demo.gif
XIOC detected IP: ::9
XIOC detected IP: ::a
XIOC detected IP: c::
XIOC detected Domain: hafiz408.nexus
XIOC detected Domain: build.py
XIOC detected Domain: client.ping
XIOC detected Domain: readme.md
XIOC detected Domain: schemas.openxmlformats.org
XIOC detected IP: ea::
XIOC detected IP: ::af
XIOC detected Domain: e9.ph
XIOC detected Domain: n.gt
XIOC detected Domain: w.cab
XIOC detected Domain: ns.adobe.com
XIOC detected Domain: js.map
XIOC detected Domain: extension-output-publisher.name
XIOC detected Domain: asyncio.to
XIOC detected Domain: y.vi
XIOC detected Domain: ҋ.sv
XIOC detected Domain: k.bi
XIOC detected Domain: q.ph
XIOC detected Domain: 6.ye
XIOC detected Domain: c.mk
XIOC detected Domain: n.my
XIOC detected Domain: v.do
XIOC detected Domain: i.cz
XIOC detected Domain: h.bs
XIOC detected Domain: t.tm
XIOC detected Domain: q.tj
XIOC detected Domain: k.ht
XIOC detected Domain: 6.hk
XIOC detected Domain: 7.es
XIOC detected Domain: b.tj
XIOC detected Domain: u.us
XIOC detected Domain: t.mu
XIOC detected Domain: 6.lt
XIOC detected Domain: z.sd
XIOC detected Domain: a.dz
XIOC detected Domain: 4.pl
XIOC detected Domain: 8.dz
XIOC detected Domain: ھ.my
XIOC detected Domain: x.pn
XIOC detected Domain: u.ir
XIOC detected Domain: 큨.ag
XIOC detected Domain: q.ws
XIOC detected Domain: a.ca
XIOC detected Domain: s.sx
XIOC detected Domain: m.om
XIOC detected Domain: 2.ar.ax
XIOC detected Domain: 5.kh
XIOC detected Domain: dka.lb
XIOC detected Domain: 3ha.ls
XIOC detected Domain: kp.re
XIOC detected Domain: z.uz
XIOC detected Domain: rciv.bbt
XIOC detected Domain: m.ge
XIOC detected Domain: ak.lt
XIOC detected Domain: x.nl
XIOC detected Domain: z5.cy
XIOC detected Domain: x.uy
XIOC detected Domain: į.dz
XIOC detected Domain: r.ai
XIOC detected Domain: o.er
XIOC detected Domain: 7f.ps
XIOC detected Domain: c.bn
XIOC detected Domain: d.fi
XIOC detected Domain: w.lc
XIOC detected IP: 0::
XIOC detected Domain: b.cc
XIOC detected Domain: q.cf
XIOC detected Domain: խ.qa
XIOC detected Domain: h.sa
XIOC detected Domain: i.gh
XIOC detected Domain: qx.aq
XIOC detected Domain: 9.nr
XIOC detected Domain: r6eq.et
XIOC detected Domain: d.ky
XIOC detected Domain: mm.la
XIOC detected Domain: 0g.bv
XIOC detected Domain: qi.gp
XIOC detected Domain: this.context.secrets.store
XIOC detected Domain: date.now
XIOC detected Domain: hasownprop.call
XIOC detected Domain: q.ca
XIOC detected Domain: q.pm
XIOC detected Domain: b.uy
XIOC detected Domain: d.bb
XIOC detected Domain: lock.pid
XIOC detected Domain: progress.report
XIOC detected Domain: msg.pr
XIOC detected Domain: msg.target
XIOC detected Domain: reader.read
XIOC detected Domain: err.name
XIOC detected Domain: filecitations.map
XIOC detected Domain: electronjs.org
XIOC detected Domain: www.andismith.com
XIOC detected Domain: reactjs.org
XIOC detected Domain: providers.map
XIOC detected Domain: files.map
XIOC detected Domain: channel.show
XIOC detected Domain: proc.pid
XIOC detected Domain: type.name
XIOC detected Domain: innertype.name
XIOC detected Domain: value.constructor.name
XIOC detected Domain: constructor.name
XIOC detected Domain: function.prototype.apply.call
XIOC detected Domain: args.map
XIOC detected Domain: html.spec.whatwg.org
XIOC detected Domain: console.group
XIOC detected Domain: console.info
XIOC detected Domain: render.name
XIOC detected Domain: func.call
XIOC detected Domain: iterator.next
XIOC detected Domain: iteratorfn.call
XIOC detected Domain: hasownproperty.call
XIOC detected Domain: b.id
XIOC detected Domain: a.id
XIOC detected Domain: noderequire.call
XIOC detected IP: ::7
XIOC detected Domain: fn.name
Network call of type 'fetch' detected.
XIOC detected Domain: fake.call
XIOC detected Domain: props.name
XIOC detected Domain: node.name
XIOC detected Domain: set2.call
XIOC detected Domain: get2.call
XIOC detected Domain: localdate.now
XIOC detected Domain: localperformance.now
XIOC detected Domain: performance.now
XIOC detected Domain: array.prototype.slice.call
XIOC detected Domain: nativeevent.target
XIOC detected Domain: unknownprops.map
XIOC detected Domain: invalidprops.map
XIOC detected Domain: props.is
XIOC detected Domain: props.style
XIOC detected Domain: node.style
XIOC detected Domain: enterevent.target
XIOC detected Domain: leave.target
XIOC detected Domain: nativeevent.data
XIOC detected Domain: event.data
XIOC detected Domain: detail.data
XIOC detected Domain: this.target
XIOC detected Domain: queuedtarget.target
XIOC detected Domain: instance.style
XIOC detected Domain: nextnode.data
XIOC detected Domain: nextrawprops.name
XIOC detected Domain: object.prototype.tostring.call
XIOC detected Domain: event.target
XIOC detected Domain: info.top
XIOC detected Domain: object.is
XIOC detected Domain: dependency.next
XIOC detected Domain: pending.next
XIOC detected Domain: update.next
XIOC detected Domain: newchildren.next
XIOC detected Domain: suspendedcontext.id
XIOC detected Domain: node.data
XIOC detected Domain: instance.data
XIOC detected Domain: payload.call
XIOC detected Domain: lastbaseupdate.next
XIOC detected Domain: newlast.next
XIOC detected Domain: interleaved.next
XIOC detected Domain: lastpendingupdate.next
XIOC detected Domain: lastinterleavedupdate.next
XIOC detected Domain: lastcontextdependency.next
XIOC detected Domain: basequeue.next
XIOC detected Domain: workinprogresshook.next
XIOC detected Domain: hook.next
XIOC detected Domain: currenthook.next
XIOC detected Domain: callback.call
XIOC detected Domain: newlastbaseupdate.next
XIOC detected Domain: currentlastbaseupdate.next
XIOC detected Domain: component.name
XIOC detected Domain: component.compare
XIOC detected Domain: lasteffect.next
XIOC detected Domain: effect.next
XIOC detected Domain: lastrenderphaseupdate.next
XIOC detected Domain: newbasequeuelast.next
XIOC detected Domain: pendingqueue.next
XIOC detected Domain: originalcallback.call
XIOC detected Domain: currenthook2.next
XIOC detected Domain: pendingprops.id
XIOC detected Domain: families.map
XIOC detected Domain: finishedwork.memoizedprops.id
XIOC detected Domain: memoize.id
XIOC detected Domain: childreniterator.next
XIOC detected Domain: msg.chat
XIOC detected Domain: textarea.select
XIOC detected Domain: findings.map
XIOC detected Domain: impactradius.map
XIOC detected Domain: suspects.map
XIOC detected Domain: parts.map
XIOC detected Domain: window.top
XIOC detected Domain: logs.map
XIOC detected Domain: options.map
XIOC detected Domain: showncitations.map
XIOC detected Domain: msg.id
XIOC detected Domain: messages.map
Network call of type 'fetch' detected.
XIOC detected Domain: configstatus.chat
XIOC detected Domain: e.target
XIOC detected URL: http://schemas.openxmlformats.org/package/2006/content-types
XIOC detected Domain: changelog.md
XIOC detected Domain: microsoft.visualstudio.services.links.support
XIOC detected Domain: schemas.microsoft.com
XIOC detected Domain: dev.md
XIOC detected Domain: entry.id
XIOC detected URL: https://reactjs.org/link/special-props)
XIOC detected URL: https://github.com/facebook/react/issues/3236).
XIOC detected URL: http://127.0.0.1:$
XIOC detected URL: http://127.0.0.1:8000
XIOC detected URL: http://127.0.0.1:$
XIOC detected URL: https://github.com/Hafiz408/Nexus/releases/download/v$
XIOC detected URL: https://github.com/Hafiz408/Nexus/releases
XIOC detected URL: http://www.andismith.com/blog/2012/02/modernizr-prefixed/),
XIOC detected URL: https://reactjs.org/link/controlled-components
XIOC detected URL: https://reactjs.org/link/controlled-components
XIOC detected URL: https://github.com/facebook/react/issues
XIOC detected URL: https://reactjs.org/link/warning-keys
XIOC detected URL: https://reactjs.org/link/invalid-hook-call
XIOC detected URL: https://reactjs.org/link/strict-mode-string-ref',
XIOC detected URL: https://html.spec.whatwg.org/multipage/syntax.html#html-integration-point
XIOC detected URL: https://electronjs.org/docs/api/webview-tag
XIOC detected URL: https://reactjs.org/link/react-devtools
XIOC detected URL: https://reactjs.org/link/crossorigin-error
XIOC detected URL: https://reactjs.org/link/attribute-behavior
XIOC detected URL: https://reactjs.org/link/invalid-aria-props
XIOC detected URL: https://reactjs.org/link/dangerously-set-inner-html
XIOC detected URL: https://reactjs.org/link/rules-of-hooks
XIOC detected URL: https://reactjs.org/link/refs-must-have-owner
XIOC detected URL: https://reactjs.org/link/strict-mode-string-ref
XIOC detected URL: https://reactjs.org/link/legacy-context
XIOC detected URL: https://reactjs.org/link/derived-state
XIOC detected URL: https://reactjs.org/link/derived-state
XIOC detected URL: https://reactjs.org/link/unsafe-component-lifecycles
XIOC detected URL: https://reactjs.org/link/wrap-tests-with-act
XIOC detected URL: https://reactjs.org/link/wrap-tests-with-act
XIOC detected URL: https://reactjs.org/link/setstate-in-render
XIOC detected URL: https://reactjs.org/link/hooks-data-fetching
XIOC detected URL: https://reactjs.org/link/error-boundaries
XIOC detected URL: https://reactjs.org/link/unsafe-component-lifecycles
XIOC detected URL: https://reactjs.org/link/rules-of-hooks
XIOC detected URL: https://github.com/Hafiz408/Nexus
XIOC detected URL: https://reactjs.org/link/react-devtools-faq
XIOC detected URL: https://reactjs.org/link/react-devtools
XIOC detected URL: https://reactjs.org/link/react-polyfills
XIOC detected URL: https://reactjs.org/link/switch-to-createroot
XIOC detected URL: https://reactjs.org/link/strict-mode-find-node
XIOC detected URL: https://reactjs.org/link/strict-mode-find-node
XIOC detected URL: https://github.com/Hafiz408/Nexus/blob/HEAD/DEV.md)
XIOC detected URL: https://github.com/Hafiz408/Nexus)
XIOC detected URL: https://ollama.com)
XIOC detected URL: https://open-vsx.org/extension/Hafiz408/nexus-ai)
XIOC detected URL: https://marketplace.visualstudio.com/items?itemName=Hafiz408.nexus-ai)
XIOC detected URL: https://raw.githubusercontent.com/Hafiz408/Nexus/main/extension/images/demo.gif
XIOC detected URL: https://github.com/Hafiz408/Nexus/blob/main/backend/app/retrieval/README.md)
XIOC detected URL: https://github.com/Hafiz408/Nexus#readme
XIOC detected URL: https://github.com/Hafiz408/Nexus/issues
XIOC detected URL: https://github.com/Hafiz408/Nexus.git
XIOC detected IP: 4::
Network call of type 'fetch' detected.
Network call of type 'fetch' detected.
XIOC detected IP: ::bef
Network call of type 'fetch' detected.
XIOC detected Domain: parenttype.name
XIOC detected Domain: fn.call
XIOC detected Domain: o.ye
XIOC detected IP: ::0
YARA rule match: -credential_env_files
YARA rule match: -postinstall_obfuscation
YARA rule match: -postinstall_file_manipulation
YARA rule match: -postinstall_network_communication
YARA rule match: -postinstall_file_download
YARA rule match: -postinstall_system_command
YARA rule match: -postinstall_persistence_mechanism
YARA rule match: -postinstall_system_command
YARA rule match: -postinstall_obfuscation
YARA rule match: -postinstall_file_manipulation
YARA rule match: -postinstall_system_command
YARA rule match: -postinstall_persistence_mechanism
Found dependency: react@^18.0.0
Found dependency: react-dom@^18.0.0
YARA rule match: -postinstall_obfuscation
YARA rule match: -postinstall_file_manipulation
YARA rule match: -postinstall_network_communication
YARA rule match: -postinstall_file_download
YARA rule match: -postinstall_registry_modification
YARA rule match: -postinstall_system_command
YARA rule match: -postinstall_persistence_mechanism
YARA rule match: -postinstall_network_communication
YARA rule match: -postinstall_obfuscation
YARA rule match: -credential_env_files
YARA rule match: -postinstall_persistence_mechanism
YARA rule match: -postinstall_system_command
YARA rule match: -postinstall_network_communication
YARA rule match: -postinstall_system_command
YARA rule match: -credential_env_files
YARA rule match: -postinstall_system_command
YARA rule match: -postinstall_file_manipulation
YARA rule match: -postinstall_network_communication
YARA rule match: -postinstall_file_download
YARA rule match: -postinstall_system_command
YARA rule match: -NoUseWeakRandom
YARA rule match: -postinstall_crypto_operations
YARA rule match: -postinstall_file_download
YARA rule match: -postinstall_obfuscation
YARA rule match: -postinstall_crypto_operations
YARA rule match: -postinstall_file_manipulation
YARA rule match: -postinstall_network_communication
YARA rule match: -postinstall_file_download
YARA rule match: -postinstall_registry_modification
YARA rule match: -postinstall_obfuscation
YARA rule match: -postinstall_persistence_mechanism
YARA rule match: -NoUseWeakRandom
YARA rule match: -postinstall_network_communication
YARA rule match: -postinstall_system_command
YARA rule match: -postinstall_file_manipulation
Recommended Action
This extension has significant security concerns that warrant careful review. Consider uninstalling or finding a safer alternative. If you must use it, limit the permissions and monitor for suspicious activity.