averlo-code-replay
Warn
Audited by Socket on Oct 23, 2026
1 alert found:
AnomalyAnomalyextension/extension.js
LOWAnomalyLOW
extension/extension.js
This VS Code extension automatically reads a workspace replay manifest and performs editor actions, including truncating the configured target file before replay. The automatic execution and destructive write are significant safety concerns, and the lexical path check does not prevent symlink-based writes outside the workspace. No data exfiltration or other clear malware behavior is visible in this fragment; the replay executor and manifest validation require separate review.
Confidence: 97%Severity: 65%
Audit Metadata