New standalone scanner (prefix IDE) discovers installed VS Code extensions across forks (Cursor, Windsurf, VSCodium, code-server, Insiders, Remote-SSH) and runs 7 IDE-specific threat checks: blocklist match (CRITICAL), theme-with-code, sideload (unsigned .vsix), dangerous uninstall hook (HIGH), wildcard activation, extension-pack expansion, typosquat (MEDIUM). Per-extension reuse of UNI/ENT/NET/TNT/MEM/SCR scanners with bounded concurrency. Offline-first; --online opt-in. JetBrains discovery stubbed for v1.1. 22 new tests (1296 total, was 1274). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
10 lines
292 B
JSON
10 lines
292 B
JSON
{
|
|
"_meta": {
|
|
"source": "Stub for v1.1 — IntelliJ discovery deferred. See research brief §2, §4.",
|
|
"count": 0,
|
|
"last_updated": "2026-04-17",
|
|
"purpose": "Typosquat detection seed for JetBrains plugins. To be populated in v1.1."
|
|
},
|
|
"jetbrains": [],
|
|
"blocklist": []
|
|
}
|