VSCan

Show HN: VSCan - Detect Malicious VSCode Extensions

VSCan operates in show hn launch.

Profile

Did you know that VSCode extensions run with full access to your system—including file system, network, and credentials? Worse, dozens of malicious extensions have already made it into the marketplace, silently compromising devices.I am a security researcher and student developer who ran into this problem myself. To help tackle this, I built a 100% free tool (no login required) that scans VSCode (and Cursor/Windsurf) extensions for:- Hidden malware and obfuscated code- Dangerous permissions and API misuse- Vulnerable dependencies and suspicious network connectionsUsers have already found hundreds of vulnerabilities in extensions. VSCan generates a clean, developer-friendly security report to

The company sits in the show hn launch segment, where it competes on its core product or service.

Its current recorded stage is Show HN launch.

Website: vscan.dev