Suspicious Commands getting executed from Vscode Extension

  • Operating system: Mac OS
  • SonarLint plugin version: v3.20.2
  • Programming language you’re coding in: Python

I some some command getting executed from the Vscode extension installed. Are those genuine command or do i have to worry about those ?

/Users/<userName>/.vscode/extensions/sonarsource.sonarlint-vscode-3.20.2-darwin-arm64/jre/17.0.8-macosx-aarch64.tar/lib/jspawnhelper 

executed

sh -c security find-certificate -a -p /Users/<userName>/Library/Keychains/login.keychain-db

I saw one more comment from other person here.

Can someone explain what’s going on ?

Clear now.

1 Like

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.