CURATION: Implementing Curated and Secure Extension Delivery with JFrog Artifactory AI Editor Extension Repositories

Introduction 
Developers now have access to an unprecedented ecosystem of tools, AI/ML models, packages, third-party components, and VS Code extensions like debuggers, formatters, cloud toolkits, and AI assistants. This rapid adoption is accelerating software delivery.

However, it also expands the software supply chain attack surface. Installing extensions from public marketplaces can introduce malicious or compromised components directly into developer workflows.

Attackers are actively exploiting this. In July 2025, a threat actor targeted a VS Code extension for the Amazon Q coding assistant by injecting a malicious prompt via a seemingly legitimate pull request. Once merged, it instructed the extension to delete accessible data across local systems and connected cloud environments. Such attacks are increasing in both frequency and sophistication, forcing organizations to trade off between productivity and security.

JFrog addresses this with Artifactory AI Editor Extension Remote Repositories, enabling secure, curated, and fully auditable VS Code extension management without disrupting developer experience.

Policy-based curation (e.g., OpenSSF alignment, malware detection)

```
Controlled allow/block installation 
```
```
Full logging and audit visibility
```

1. Installing Extensions Using Curation Policy  (OpenSSF Score Evaluation)

Curation Policy enforces OpenSSF score thresholds on all extension downloads.

 

Curation Flow

VS Code attempts to retrieve the extension package from Artifactory.

Artifactory evaluates the request using Curation Policy.

```
The policy checks for:
```

```
OpenSSF aggregated score
```
```
Missing score 
```

1.1 Installing an Extension via CLI 

 

A developer attempts to install an extension using the command line:

code --install-extension <PUBLISHER>.<EXTENSION_NAME> 
Example: code --install-extension amazonwebservices.aws-toolkit-vscode@3.89.0 --verbose

Result (Example Blocked Case)

```
OpenSSF score = 4.9
```
```
Required minimum score = ≥ 5
```

Artifactory blocks the download.

HTTP Response

403 – Forbidden

 

Curation Audit Events:

Status: BLOCKED

 

Log Samples:

In artifactory-request.log

request_method:GET
request_path:/api/aieditorextensions/harithaaru-vscode-remote/https/open-vsx.org/vscode/asset/amazonwebservices/aws-toolkit-vscode/3.89.0/Microsoft.VisualStudio.Services.VSIXPackage

request_traceid:415df509c07981b29e9c7d6ca9dea357
request_useragent:VSCode 1.106.3 (Code)
response_datetime:2025-11-27T13:48:52.652Z
response_status:403

In artifactory-service.log

request_traceid:415df509c07981b29e9c7d6ca9dea357
artifactory-service.logmessage: Sending HTTP error code 403: package amazonwebservices.aws-toolkit-vscode:3.89.0 download was blocked by jfrog packages curation service due to the following policies violated {harithaaru-vscode-policy,OpenSSF scorecard,Package has OpenSSF score(s) that are below the threshold: Aggregated score: 4.9,After reviewing the package please apply a waiver and install again if it is deemed suitable for use.}. 


2. Installing Extensions Using Curation Policy  (Malicious Package Detection)

Curation Policy inspects every extension for malicious indicators using JFrog’s security research engine.

 

 The policy evaluates:

```
Typosquatting
```
```
Dependency confusion
```
```
Suspicious or obfuscated code
```

Embedded exploit behavior
Known malicious signatures

Curation Flow

VS Code attempts to retrieve the extension package from Artifactory.

Artifactory evaluates the request using Curation Policy malicious indicators:

```
Typosquatting patterns
```
```
Suspicious payloads
```
```
Obfuscation
```
```
Exploit-like code
```

2.1 Installing an Extension via VS Code UI
A developer installs the extension directly from the VS Code Extensions marketplace panel.

 

Result

The extension passes all security scans and is considered safe:

```
No Malicious Indicators Found
```
```
Artifactory returns 200 OK
```

The extension appears in remote repository and can normally installed via VSIX file

 
 


Curation Audit Events:

Status: APPROVED

 

Log Samples: 

In artifactory-request.log

request_method:GET
request_path:/api/aieditorextensions/harithaaru-vscode-remote/_apis/public/gallery/vscode/aaaaronzhou/nginx-config-formatter-vscode-extension/latest
request_traceid:5895bc5ce594a40187adf90f33a1319c
request_useragent:VSCode 1.106.3 (Code)
response_status:200


Conclusion
JFrog Artifactory AI Editor Extension Remote Repositories provide a powerful framework for governing VS Code extensions in enterprise environments. With curation mechanisms organizations ensure only trustworthy extensions are used without disrupting developer productivity.

Developers benefit from a seamless extension installation experience, while security, DevOps, and compliance teams gain visibility, control.