Extension Security Summary

Dart

Dart-Code.dart-code@3.141.20260803

Security outcomeDo not install

Prevent execution pending review: high-confidence abuse-chain evidence matched (download-and-execute, remote-vsix-install-chain). This is a preventive policy decision, not a confirmed-malicious label.

Checked version3.141.20260803

Analysis statusCompleted

Scan date—

What this means

The key information before you install.

This is a plain-language summary of the completed analysis for this exact extension version. Technical evidence and workspace actions are available after sign-in.

Permission Passport · exact release

What this extension can reach.

Six consistent access categories, tied to version 3.141.20260803. Capability describes power—not malicious intent.

Current analysisLatest release @3.141.20260803

5 categories observed@3.141.20260803 analyzed releaseBound artifact identity

Workspace and filesystem accessFiles

Filesystem · Agent Filesystem

Observed

Commands, processes, and install scriptsTerminal

Agent Shell · Process Execution

Observed

Outbound connections and remote servicesNetwork

Network · Agent Network

Observed

Credentials, environment, and sensitive configurationSecrets

Not observed in this scan—not a guarantee of absence.

Not observed

Editor commands, webviews, and user interactionEditor

Ide Contributions

Observed

AI models, autonomous tools, MCP, and delegationAgents & tools

Agentic · Agent Shell · Agent Network · Agent Filesystem

Observed

Release context

Versions

3.141.20260803Do not install 3.140.0Not analyzed 3.139.20260731Not analyzed 3.139.20260730Not analyzed 3.139.20260716Not analyzed 3.139.20260702Not analyzed