Marketplace status and release verification

Last checked: .

Marketplace status

Transitrix Studio 3.2.0 was removed from Visual Studio Marketplace on 10 August 2026 under a Malware classification. We dispute this classification and have requested technical review. Microsoft has replied several times; its 5 October response maintained the block. We are still seeking the technical findings and a review path for an improved version.

Public status update and review request.

What the 3.2.0 evidence covers

We audited all four 3.2.0 packages distributed through Open VSX. Microsoft Defender reported no threats; VirusTotal recorded zero malicious and zero suspicious results, with some engines unable to complete analysis. These point-in-time results do not guarantee safety.

The Microsoft and Open VSX builds used the same source commit and build commands. The original Microsoft-served files are unavailable, so we cannot independently verify byte-for-byte identity. A Windows x64 rebuild matched all 519 extracted files by content hash.

Release verification

Since then, we have removed the platform-specific PNG rendering dependency. Release 3.8.1 provides the VSIX, checksums, a software bill of materials and build-provenance verification instructions. The 3.2.0 scan results should not be read as scan results for 3.8.1.

Please review the published evidence against your organisation’s requirements and keep security protections enabled.