vs.xplorer interactive view →

2077 theme

Endormi.2077-theme · published by Endormi verified
MEDIUM
1 finding detected for Endormi.2077-theme — 1 medium.
vsxplorer verdict badge
1 MEDIUM
25
versions scanned
2
sources tracked
645.0K
installs
1.5.3
latest version
2026-05-26 18:38 UTC
last scanned

Source coverage

Findings

MEDIUM child-process-exec Extension spawns subprocesses via child_process
scripts/new_version.js :13

`{file_path}` imports child_process and calls exec / spawn / execFile / fork. Subprocess execution lets the extension pivot from the VSCode host into the user's shell.

  
  // Publishing to vsce and ovsx is it's on thing which I chose not to add here
  
  const cmd = [
    `git add .`,
    `git commit -m ${version}`,
    `git push --follow-tags`
  ]
  
  cmd.map(
▶   command => execSync(command, { stdio: 'inherit' })
  )
  
Affected versions
marketplace 1.5.1, 1.5.2, 1.5.3
open-vsx 1.5.1, 1.5.2, 1.5.3

Embed this verdict

vsxplorer badge

[![vsxplorer](https://vsxplorer.veryserious.systems/badge/Endormi.2077-theme.svg)](https://vsxplorer.veryserious.systems/report/Endormi.2077-theme)