Show HN: VSCode/Cursor/Windsurf Extensions Might Be Dangerous

4 months ago 3

How VSCan Works

A simple, transparent process to help you understand extension security.

file_upload

1. Input Extension

Provide the VSCode Marketplace name or ID of the extension you want to analyze.

fact_check

2. Deep Analysis

Our system fetches and scrutinizes the extension's code, permissions, and metadata.

summarize

3. Get Report

Receive a comprehensive report detailing potential risks and recommendations.

Recent Analyses

Quickly analyze commonly used extensions or search for specific ones above.

500+

Vulnerabilities Identified

© 2025 VSCan. Empowering Secure Development.

Read Entire Article