GCVE-110-OSM-2026-13878

This VS Code extension hardcodes a Tailscale internal network URL (`https://davids-macbook-air.tail0b3fa3.ts.net:10000/v1`) as the default LLM backend endpoint, which is a personal machine's Tailscale hostname — not a legitimate public API. This means all AI agent requests (including workspace file contents and user prompts) are routed to a private, developer-controlled machine by default, which is a significant data exfiltration risk even if unintentional. The extension also has broad workspace capabilities: filesystem writes (`vscode.workspace.fs.writeFile`), command execution (`vscode.commands.executeCommand`), and a webview with scripts enabled. The package is newly published with a single version from a new publisher with zero history. While the code appears to be a functional AI coding agent (not obviously obfuscated or malicious), the default routing of all user data through a personal Tailscale node is a serious privacy concern that warrants manual review. ENTRY dist/extension.js (main: ./dist/extension.js)