Extension Security Summary

Dev Containers

ms-vscode-remote.remote-containers@0.467.0

Security outcomeDo not install

Prevent execution pending review: high-confidence abuse-chain evidence matched (remote-vsix-install-chain). This is a preventive policy decision, not a confirmed-malicious label.

Checked version0.467.0

Analysis statusCompleted

Scan date—

What this means

The key information before you install.

This is a plain-language summary of the completed analysis for this exact extension version. Technical evidence and workspace actions are available after sign-in.

Permission Passport · exact release

What this extension can reach.

Six consistent access categories, tied to version 0.467.0. Capability describes power—not malicious intent.

Current analysisLatest release @0.467.0

4 categories observed@0.467.0 analyzed releaseBound artifact identity

Workspace and filesystem accessFiles

Filesystem · Destructive File Activity

Observed

Commands, processes, and install scriptsTerminal

Lifecycle Scripts · Process Execution

Observed

Outbound connections and remote servicesNetwork

Network

Observed

Credentials, environment, and sensitive configurationSecrets

Credential Configuration

Observed

Editor commands, webviews, and user interactionEditor

Not observed in this scan—not a guarantee of absence.

Not observed

AI models, autonomous tools, MCP, and delegationAgents & tools

Not observed in this scan—not a guarantee of absence.

Not observed

Release context

Versions

0.466.0Not analyzed 0.467.0Do not install 0.465.0Not analyzed 0.463.0Not analyzed 0.464.0Not analyzed 0.462.0Not analyzed