A tool for paste images that in clipboard to sm.ms
The "paste-smms" extension for Visual Studio Code uploads images from the clipboard to the sm.ms image hosting service and inserts a Markdown image link at the cursor position. It is deemed a critical risk due to confirmed malicious behavior and association with known malicious activities.
Key insights:
child_process, potentially exceeding its intended scope.
Flags items that exhibit confirmed malicious activity.
Evidence
This item is flagged as software intended to perform unwanted or harmful actions within a system, often without the knowledge or consent of those affected. It can disrupt normal operations, compromise data, or enable unauthorized access.
Flags items if either the item or its contained binaries have high number of detections by threat intel engines.
Flags items that have been removed or delisted from the marketplace, potentially due to security vulnerabilities, or malicious behavior. Such extensions pose a risk as they are no longer maintained or patched.
AI-powered analysis of the extension's source code for security insights and risk assessment.
This Visual Studio Code extension named "paste-smms" enables users to upload images from their clipboard directly to the image hosting service sm.ms and insert the resulting image URL markdown into the active editor. Key behaviors include:
Activation and Command Registration: The extension activates on the first execution of the command extension.paste2smms.
Configuration Reading: Reads a socks5proxy setting from the user's VSCode configuration under the paste namespace to optionally route network requests through a SOCKS5 proxy.
Platform-Specific Clipboard Handling:
res/pasteFromClip.bat passing proxy options.res/pasteFromClip.sh with temporary file path and proxy options.Child Process Management: Uses Node.js child_process.spawn to execute these scripts, capturing their standard output and error streams.
JSON Response Parsing: Parses JSON output from the scripts to determine success or failure of the upload.
Editor Modification: On successful upload, inserts markdown image syntax with the uploaded image URL at the current cursor position.
User Notifications: Shows information messages to the user about upload status and errors.
Logging: Outputs diagnostic information and errors to the console.
No direct network communication is performed by the extension code itself; network activity is delegated to the external scripts. The extension does not perform any Windows Registry operations, user creation, clipboard access directly (delegated to scripts), or persistence mechanisms. It does execute shell and batch scripts as child processes, which handle the actual clipboard image extraction and upload.
API calls detected through static analysis of the source code. For more accurate insights, explore our sandbox dynamic analysis.
Any encoded/decoded secrets we managed to find in the source code, git repository, or related files
Known vulnerabilities and security issues detected in the extension's dependencies and code.
Any identifiers we detected that may indicate external communication from the item's code
Dependencies and third-party libraries used by the extension, including version information and license details.
