vscode-gremlins
trojan-source
Our great sponsors
| vscode-gremlins | trojan-source | |
|---|---|---|
| 3 | 21 | |
| 180 | 1,215 | |
| - | - | |
| 6.8 | 3.6 | |
| 18 days ago | about 1 year ago | |
| JavaScript | SCSS | |
| GNU General Public License v3.0 or later | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
vscode-gremlins
-
Visuo studio has a plugin for detecting those invisible characters. https://github.com/nhoizey/vscode-gremlins You should look for one for your IDE.
-
Smuggling hidden backdoors into JavaScript with homoglyphs and invisible Unicode characters
PHPStorm detects \u3164 "HANGUL FILLER" but VS Code does not. I tried using the Gremlins plugin, but looks like it currently doesn't detect this confusable. Is there any alternative plugin or setting in VS code to help detect these characters?
-
Expectations for Generics in Go 1.18
On VSCode, I use the Gremlins extension which highlight all those suspicious characters.
https://github.com/nhoizey/vscode-gremlins
trojan-source
- Trojan Source Attacks (2021)
- What is some niche/ quirky python code you know?
-
Android Studio’s “Code contains easter egg” inspection (2019)
Is this one of those trojan source attacks in the wild?
https://trojansource.codes/
-
So, it seems there will be another issue, different than the 32 bit time thing
see this github repo fkr examples
-
- Trojan Source: Invisible Vulnerabilities
-
The Invisible JavaScript Backdoor
Bonus: if you interested in look at Trojan-source (similar examples) and TrojanSourceFinder (tool to detect them)
Works for me with the examples from https://github.com/nickboucher/trojan-source
-
A h4cker just cr4shed a match with special characters in text chat. I got an abandon and lost hard earned elo
This is coming out of a team at Cambridge. Read up on it here Trojan source
- Trojan Source – Invisible Source Code Vulnerabilities
What are some alternatives?
awesome-vscode - 🎨 A curated list of delightful VS Code packages and resources.
mvregex
vscode-javascript-extensions - VS Code extension examples written in in JavaScript
aboriginal - Aboriginal Generics: the future is here!
go - The Go programming language
vim-troll-stopper - Stop Unicode trolls from messing with your code.
zio-prelude - A lightweight, distinctly Scala take on functional abstractions, with tight ZIO integration
TrojanSourceFinder - 🔎 Help find Trojan Source vulnerability in code 👀 . Useful for code review in project with multiple collaborators (CI/CD)
proposal - Go Project Design Documents
rust - Empowering everyone to build reliable and efficient software.
Discord-Tools - VSCode extension allowing the integration of a Discord chat, bot templates, snippets, themes and more!
rust - Rust for the xtensa architecture. Built in targets for the ESP32 and ESP8266