#vulnerabilities

SentinelCore

jabesxfuentes

SentinelCore detects vulnerable dependencies, risky code patterns, AI-like code smells, and security issues across JavaScript, TypeScript, Python, PHP, and HTML. Author: Jabes Fuentes

VibeSafe - Security Scanner

vibesafe-info

Scan your code for security vulnerabilities, exposed secrets, and bugs. Built for vibe coders. Official extension of vibesafe.info

Dependency Explorer

RuanduPlessis

Full dependency tree (including transitive dependencies) for npm, pnpm and NuGet projects, with vulnerability flags and one-click update, transitive override, or bulk fix.

SonarQube Dashboard & Pipeline

jesusromero

Run SonarQube analysis pipelines and inspect Quality Gates, issues, Security Hotspots, coverage, duplication, and execution history directly in VS Code.

NPM Advisor

AgenticWebLabs

Package intelligence, security insights, dependency analysis, and AI-powered evaluation for npm packages, directly inside VSCode.

Patchd Security

patchd

Real-time security scanning powered by Patchd AI

AnzenCore

gianfranco-arocutipa

Analizador de vulnerabilidades móviles (APK) y code smells de AnzenCore, sin salir de VS Code. El escaneo de APK es 100% local y offline.

TrustMeBro

uskhokhar

Dependency trust intelligence for modern developers. Continuously monitors your dependencies for compromises, vulnerabilities, and supply chain risks.

npm Package Lens

codybrom

Dependency updates, peer-conflict warnings, vulnerability checks, and one-click upgrades — inline in package.json

FLCN Security — Credential & Vulnerability Guard

FLCN-16

Real-time credential detection and redaction. Protects against leaking API keys, tokens, and secrets to AI coding assistants.

vuln.mlab.sh SBOM scan

mlab-sh

Manually scan lockfiles for known CVEs via vuln.mlab.sh. No automatic scanning; you decide when a lockfile leaves your machine.

CipherNest

CipherNestSecure

AI-aware security scanner for VS Code — code vulnerabilities, LLM risks, secrets, dependencies, MCP & agent security