Kjell Tore Guttormsen
66e8ce2740
#20 git-forensics' reflog force-push detector had a redundant bare 'reset' term subsuming 'reset:', so any commit subject containing 'reset' tripped it; removed. #22 diff-engine's per-current moved-fallback greedily consumed a baseline candidate a later byte-exact match needed (mislabeling unchanged as new/moved on duplicate fingerprints); a global exact pass now runs before the moved-fallback. #54 memory-poisoning double-reported a 64+ char hex token as both base64 and hex; the base64 check now skips pure-hex tokens. #56 SARIF output hardcoded driver.version 6.0.0 because the orchestrator called toSARIF() without a version; it now passes the real plugin version from package.json. #50 the VS Code known-malicious blocklist was empty with no explanation (unlike the JetBrains file's 'empty by design' note); added a matching blocklist_note. Suite 2004/0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TcQyMTQfyrsAapaCMPxTtQ
119 lines
4 KiB
JSON
119 lines
4 KiB
JSON
{
|
|
"_meta": {
|
|
"source": "VS Code Marketplace 'Most Popular' snapshot 2026-04-17. Manually curated from Marketplace and Koi/ExtensionTotal research.",
|
|
"count": 100,
|
|
"last_updated": "2026-04-17",
|
|
"purpose": "Typosquat detection seed. IDs are lowercase publisher.name.",
|
|
"blocklist_note": "Empty by design — the Koi/ExtensionTotal research cited in source informed the allowlist curation, not confirmed-malicious IDs; no publicly confirmed-malicious VS Code Marketplace extension IDs curated as of 2026-04-17. Enterprise policy.json can seed private entries with form {id, version_range, reason, source}."
|
|
},
|
|
"vscode": [
|
|
"ms-python.python",
|
|
"ms-python.vscode-pylance",
|
|
"ms-python.debugpy",
|
|
"esbenp.prettier-vscode",
|
|
"dbaeumer.vscode-eslint",
|
|
"ms-azuretools.vscode-docker",
|
|
"github.copilot",
|
|
"github.copilot-chat",
|
|
"github.vscode-pull-request-github",
|
|
"github.remotehub",
|
|
"anthropic.claude-code",
|
|
"ms-vscode.cpptools",
|
|
"ms-vscode.cpptools-extension-pack",
|
|
"ms-vscode.cmake-tools",
|
|
"twxs.cmake",
|
|
"golang.go",
|
|
"rust-lang.rust-analyzer",
|
|
"vadimcn.vscode-lldb",
|
|
"vscode-icons-team.vscode-icons",
|
|
"zhuangtongfa.material-theme",
|
|
"pkief.material-icon-theme",
|
|
"ritwickdey.liveserver",
|
|
"redhat.java",
|
|
"vscjava.vscode-java-pack",
|
|
"vscjava.vscode-java-debug",
|
|
"vscjava.vscode-java-test",
|
|
"vscjava.vscode-maven",
|
|
"vscjava.vscode-gradle",
|
|
"ms-vscode-remote.remote-ssh",
|
|
"ms-vscode-remote.remote-ssh-edit",
|
|
"ms-vscode-remote.remote-containers",
|
|
"ms-vscode-remote.remote-wsl",
|
|
"ms-vscode-remote.vscode-remote-extensionpack",
|
|
"ms-dotnettools.csharp",
|
|
"ms-dotnettools.csdevkit",
|
|
"ms-dotnettools.vscode-dotnet-runtime",
|
|
"ms-toolsai.jupyter",
|
|
"ms-toolsai.jupyter-keymap",
|
|
"ms-toolsai.jupyter-renderers",
|
|
"ms-toolsai.vscode-jupyter-cell-tags",
|
|
"ms-toolsai.vscode-jupyter-slideshow",
|
|
"streetsidesoftware.code-spell-checker",
|
|
"editorconfig.editorconfig",
|
|
"codeium.codeium",
|
|
"continue.continue",
|
|
"saoudrizwan.claude-dev",
|
|
"visualstudioexptteam.vscodeintellicode",
|
|
"visualstudioexptteam.intellicode-api-usage-examples",
|
|
"bradlc.vscode-tailwindcss",
|
|
"formulahendry.auto-rename-tag",
|
|
"formulahendry.auto-close-tag",
|
|
"wix.vscode-import-cost",
|
|
"christian-kohler.path-intellisense",
|
|
"christian-kohler.npm-intellisense",
|
|
"mhutchie.git-graph",
|
|
"eamodio.gitlens",
|
|
"donjayamanne.githistory",
|
|
"waderyan.gitblame",
|
|
"ms-vscode.live-server",
|
|
"ms-vscode.powershell",
|
|
"ms-vscode.vscode-typescript-next",
|
|
"ms-vscode.vscode-node-azure-pack",
|
|
"ms-vscode.makefile-tools",
|
|
"ms-vscode.hexeditor",
|
|
"hashicorp.terraform",
|
|
"hashicorp.hcl",
|
|
"redhat.vscode-yaml",
|
|
"redhat.vscode-xml",
|
|
"tamasfe.even-better-toml",
|
|
"yzhang.markdown-all-in-one",
|
|
"davidanson.vscode-markdownlint",
|
|
"shd101wyy.markdown-preview-enhanced",
|
|
"yzane.markdown-pdf",
|
|
"unifiedjs.vscode-mdx",
|
|
"mechatroner.rainbow-csv",
|
|
"sonarsource.sonarlint-vscode",
|
|
"snyk-security.snyk-vulnerability-scanner",
|
|
"42crunch.vscode-openapi",
|
|
"humao.rest-client",
|
|
"rangav.vscode-thunder-client",
|
|
"ms-kubernetes-tools.vscode-kubernetes-tools",
|
|
"redhat.vscode-commons",
|
|
"bmewburn.vscode-intelephense-client",
|
|
"xdebug.php-debug",
|
|
"dbaeumer.jshint",
|
|
"esbenp.vscode-prettier",
|
|
"svelte.svelte-vscode",
|
|
"vue.volar",
|
|
"angular.ng-template",
|
|
"denoland.vscode-deno",
|
|
"biomejs.biome",
|
|
"oven.bun-vscode",
|
|
"astro-build.astro-vscode",
|
|
"styled-components.vscode-styled-components",
|
|
"graphql.vscode-graphql",
|
|
"graphql.vscode-graphql-syntax",
|
|
"prisma.prisma",
|
|
"bigonesystems.django",
|
|
"ms-azuretools.vscode-azurefunctions",
|
|
"ms-azuretools.vscode-azureresourcegroups",
|
|
"amazonwebservices.aws-toolkit-vscode",
|
|
"googlecloudtools.cloudcode",
|
|
"orta.vscode-jest",
|
|
"firsttris.vscode-jest-runner",
|
|
"vitest.explorer",
|
|
"ms-playwright.playwright",
|
|
"cypress-io.vscode-cypress"
|
|
],
|
|
"blocklist": []
|
|
}
|