Code Guardian — Glassworm & Malware Threat Scanner 🛡️

Proactive Glassworm & malware defense, one-click threat neutralizer & quarantine, extension supply-chain auditor, credential scanner, and pre-push blocker for VS Code, Cursor, Windsurf & Open VSX editors.

Code Guardian is a developer security suite built for modern IDEs (VS Code, Cursor, Windsurf, VSCodium, and Antigravity IDE). It delivers Real-Time Editor Diagnostics, an Interactive 3-Tab Security Cockpit, an Emergency Startup Task Terminator, an Extension Supply-Chain Auditor, a Deep Credential Scanner, and Automated Git Pre-Push Protection.

📸 Interactive Security Cockpit & Visual Highlights

1. 🪱 Tab 1: Repo Scan — Multi-Branch Git & Workspace Defense

Inspects all local and remote branches via safe read-only Git queries (git show, git ls-tree) for Glassworm malware, fake font payloads, and injected configurations. Tab 1 Repo Scan Dashboard

2. 📦 Tab 2: Extension Scan — Supply-Chain Security & Extension Auditor

Audits installed extensions (vscode.extensions.all) against 418+ threat signatures, ForceMemo markers (lzcdrtfxyqiplpd), and invisible Unicode variation selectors (U+FE00–U+FE0F). Tab 2 Extension Scan Dashboard

3. 🔑 Tab 3: Credential Scan — Deep Secret & API Key Detector

Scans workspace files, git branch tips, and commit history for Google API keys, AWS keys, GitHub tokens, Stripe keys, JWTs, and PEM keys. Features secret card consolidation, token masking, and in-place reveal. Tab 3 Credential Scan Dashboard

Zero-delay interceptor that terminates malicious folder-open tasks (runOn: folderOpen), disposes stealth terminals, and disables automatic task execution (task.allowAutomaticTasks: off). Emergency Task Interceptor Modal

🌟 Key Capabilities

🖥️ Interactive 3-Tab Security Cockpit: Full visual cockpit for Repo Scan, Extension Scan, and Credential Scan.
🚨 Emergency Startup Task Interceptor: Automatically stops harmful autorun tasks on folder open and kills headless stealth processes.
📦 Extension Supply-Chain Auditor: Audits extensions for malicious supply-chain campaign signatures with 1-click Uninstall actions.
🔑 Deep Secret & Credential Scanner: Consolidates identical leaks across multiple files and provides 1-click token copy with "✓ Copied!" feedback.
🛡️ 1-Click Auto-Fix & Quarantine: Disarms Glassworm loaders, sanitizes task configs, and moves fake fonts to .codeguardian/quarantine/.
🔍 Sandboxed Branch Viewer: View remote branch threats in read-only virtual tabs (guardian-branch://) without checking out code or touching disk.
🚫 Git Pre-Push & NPM Preinstall Blocker: Blocks git pushes and npm installs when error-severity threat signatures are detected.
🌐 Global Machine-Wide Protection: Sets core.hooksPath to protect all repositories across your computer.
🔒 100% Offline & Private: Zero data leaves your machine. All scanning and detection run locally.

⌨️ Command Palette Commands (`Ctrl+Shift+P` / `Cmd+Shift+P`)

Command	Identifier	Description
Code Guardian: Open Security Dashboard	`codeguardian.openDashboard`	Opens the interactive 3-Tab Security Cockpit.
Code Guardian: Scan Workspace	`codeguardian.scanWorkspace`	Full workspace scan with progress indicator and Problems panel output.
Code Guardian: Scan Current File	`codeguardian.scanCurrentFile`	Scans the active editor document immediately.
Code Guardian: Scan All Git Branches & Refs	`codeguardian.scanAllBranches`	Scans all local & remote Git refs using safe read-only queries.
Code Guardian: Scan Installed Extensions	`codeguardian.scanExtensions`	Audits installed extensions for malware and supply-chain threats.
Code Guardian: Scan for Exposed Credentials	`codeguardian.scanCredentials`	Scans workspace and Git branches for leaked secrets and API keys.
Code Guardian: Neutralize & Disarm All Threats	`codeguardian.neutralizeAll`	Auto-fixes and disarms all active threats in bulk.
Code Guardian: Quarantine Malicious File	`codeguardian.quarantineFile`	Quarantines fake font payloads or malicious batch scripts.
Code Guardian: Reload Rules	`codeguardian.reloadRules`	Clears in-memory cache and reloads configuration from disk.
Code Guardian: Open Configuration	`codeguardian.openConfig`	Opens or creates `.codeguardian.json`.
Code Guardian: Enable Global Protection	`codeguardian.enableGlobalProtection`	Sets machine-wide `core.hooksPath` (~/.code-guardian/hooks).
Code Guardian: Disable Global Protection	`codeguardian.disableGlobalProtection`	Unsets machine-wide global hooks path.
Code Guardian: Remove All Protection & Git Hooks	`codeguardian.cleanupAll`	Removes all hooks, preinstall guards, and global configs (uninstall helper).

🔧 Extension Settings (`settings.json`)

{
  "codeGuardian.enabled": true,
  "codeGuardian.enableGlobalHooks": true,
  "codeGuardian.scanOnSave": true,
  "codeGuardian.scanOnOpen": true,
  "codeGuardian.scanRepoOnActivation": true,
  "codeGuardian.blockNpmInstall": true,
  "codeGuardian.showNotifications": true,
  "codeGuardian.fetchRemotesBeforeScan": true,
  "codeGuardian.configFileName": ".codeguardian.json"
}

📄 License

Distributed under the MIT License. Created with ❤️ by Meet Kathiriya.

Code Guardian — Glassworm & Malware Threat Scanner

kmeet99999