[Critical] Namespace 'donebd' ownership lost & Extension removed without notification

[donebd]

Hi Open VSX Team,

I am writing to report a critical issue with my publisher account and extension.

The Issue:

My extension donebd.vscode-keypromoter has completely disappeared from the registry (Link: https://open-vsx.org/extension/donebd/vscode-keypromoter returns 404).

My namespace donebd appears empty: https://open-vsx.org/namespace/donebd

Most importantly: In my user dashboard, I no longer see myself as the owner of the donebd namespace, and it prompts me to sign the Publisher Agreement again, even though I have been publishing for a while.

Context:

I successfully verified this namespace previously in issue EclipseFdn/open-vsx.org#6113
I did not receive any email notification regarding a takedown, ban, or policy violation.
I suspect this might be related to an automated false-positive flag on the extension binaries (which I am currently resolving with Microsoft Marketplace support), but the complete loss of namespace access seems like a system error.
Request: Could you please investigate why my namespace association was dropped and why the extension was removed? If this is a security action, I would appreciate a log or a notification so I can address the specific concerns.

Thank you.

[netomi]

The extension was marked as being malicious here: EclipseFdn/publish-extensions@3d8d171

Could you comment on that @kineticsquid ?

[donebd]

Thank you for linking the commit.

I want to clarify that this flag is a False Positive caused by the essential nature of the extension.

1. Context:
This is a Key Promoter extension (educational tool). Its only function is to help developers learn keyboard shortcuts.
To do this, it must listen to global input events (using uiohook-napi) to detect when a mouse click could have been replaced by a hotkey.

2. The "Malware" Flag:
Generic antivirus engines often flag any binary that hooks into input (keyboard/mouse) as "Spyware/Keylogger" by default. However, in this case, the hooking is the core feature, not a malicious payload. The extension processes input locally and does not transmit data.

3. Verification:
The project is fully Open Source: https://github.com/donebd/vscode-keypromoter
You can verify that the binary is built directly from the source code and serves purely educational purposes.

Request:
Since removing the hook would render the extension useless, could you please review the repository context and restore the namespace/extension?

Regards,
Daniil

[kineticsquid]

@donebd Thanks for the clarification, but unfortunately we can't host an extension with this execution profile. The issue is, just like for me, someone installs this extensions, it's likely to set off their malware protection. In my case, Microsoft Defender generated an alert. You'll either need to get an exception, e.. from Microsoft, to gain approval or distribute it by other means.