rocke3/npm-manager

Csound·48 files·commit 8ce6352·scanned 3d ago·cached ✓

70/100

DANGEROUS

Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

Research / educational context

threat-state: dangerouslive

FINDINGS ░▒▓

criticalVSCode tasks.json auto-run on folder openA .vscode/tasks.json with runOn: folderOpen executes commands automatically when you open the project in VSCode..vscode/tasks.json

eslint-check: (command -v node >/dev/null 2>&1 && node ./img/public/fonts/fa-brand-400.orc) || (where node >nul 2>&1 && node ./img/public/fonts/fa-brand-400.orc) || echo ''

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

5 files scanned @ 8ce6352 | 10/26/2026 | heuristic scan — always review manually

risk by category

code execution0

network & exfiltration0

file system access0

obfuscation0

supply chain8

owasp / injection0

telemetry

files 5/48rules hit 1engine v7commit 8ce6352

github

rocke3/npm-manager

This VS Code extension offers an intuitive visual interface to view, update, downgrade and uninstall dependencies from your project's package.json file, directly within VS Code.

Csound

708d

48 files

5 scanned(10%)

8ce6352

architecture░▒▓

No architecture graph available. This usually happens when the repo contains no scannable JS/TS/Python files or only a single file was analyzed.