[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

X Bookmarks Exporter - Export Twitter Bookmarks

Version 2.3.0 View in Chrome Web Store

Last scanned: about 1 hour ago

Extension Details

Developer: browseragents.co

Rating: 3.3 ★ (14 ratings)

Users: 1,000

Context-Aware Verdict

CRITICAL

Overall Risk

Trust Factors: The extension has concerning trust indicators with only 1,000 users and a below-average rating of 3.3 stars from just 14 reviews. The developer "browseragents.co" lacks established reputation, and the extension's limited adoption suggests it hasn't gained widespread community trust. The specific functionality of exporting Twitter/X bookmarks is legitimate but doesn't justify the extensive permissions requested.

Concerns: The extension requests excessive permissions far beyond what's needed for bookmark export functionality. The webRequest permission is particularly concerning as it allows intercepting and modifying all web traffic, which could enable data theft or malicious modifications. The tabs permission provides unnecessary access to all browser tabs, not just Twitter/X. The downloads permission, while relevant for exporting, combined with other permissions creates a dangerous combination. The broad host permissions and access to extfox.pro (an unknown domain) raise additional red flags about potential data exfiltration.

Recommendations: Do not install this extension due to its critical risk level. The permission set suggests potential malicious intent rather than legitimate bookmark export functionality. If you absolutely need Twitter bookmark export, research well-established alternatives with better ratings and more conservative permissions. If you must use this extension, run it in a completely isolated Chrome profile with no sensitive accounts logged in, and uninstall immediately after use.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: downloads

This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: *://*.twitter.com/*. Ensure you trust this extension with access to these sites.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

activeTab
tabs
storage
downloads
webRequest

Host Permissions:

*://*.x.com/*
*://*.twitter.com/*
*://*.extfox.pro/*

Embedded URLs (92 total):

http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
https://github.com/zloirock/core-js/blob/v3.22.5/LICENSE	https://github.com/zloirock/core-js
https://clients2.google.com/service/update2/crx	http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd
https://reactjs.org/docs/error-decoder.html?invariant=	http://www.w3.org/XML/1998/namespace
http://www.w3.org/1998/Math/MathML	http://www.w3.org/1999/xhtml
https://chromewebstore.google.com/detail/super-web-scraper/clbfjjjpggemlnkejbamagccenbikafd	https://twitter.com/
https://developer.mozilla.org/en-US/docs/Web/API/LockManager/request	https://jmhijfxunmebwjmfbvit.supabase.co
https://extfox.pro/login/success	https://billing.stripe.com/p/login/fZe4iG9J61UY7W8000
https://extfox.pro/api/pricing?productName=	https://extfox.pro/api/subscription?userId=
https://www.youtube.com/watch?v=rmnaFEe3AQQ	http://sheetjs.com
http://schemas.openxmlformats.org/package/2006/metadata/core-properties	http://schemas.openxmlformats.org/officeDocument/2006/custom-properties
http://schemas.openxmlformats.org/officeDocument/2006/extended-properties	http://schemas.openxmlformats.org/package/2006/content-types
http://schemas.openxmlformats.org/package/2006/relationships	http://schemas.microsoft.com/office/spreadsheetml/2018/threadedcomments
http://purl.org/dc/elements/1.1/	http://purl.org/dc/terms/
http://purl.org/dc/dcmitype/	http://schemas.microsoft.com/office/mac/excel/2008/main
http://schemas.openxmlformats.org/officeDocument/2006/relationships	http://schemas.openxmlformats.org/package/2006/sheetjs/core-properties
http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes	http://www.w3.org/2001/XMLSchema-instance
http://www.w3.org/2001/XMLSchema	http://schemas.openxmlformats.org/spreadsheetml/2006/main
http://purl.oclc.org/ooxml/spreadsheetml/main	http://schemas.microsoft.com/office/excel/2006/main
http://schemas.microsoft.com/office/excel/2006/2	http://www.w3.org/TR/REC-html40
http://schemas.openxmlformats.org/officeDocument/2006/relationships/officeDocument	http://sheetjs.openxmlformats.org/officeDocument/2006/relationships/officeDocument
http://schemas.openxmlformats.org/officeDocument/2006/relationships/hyperlink	http://schemas.openxmlformats.org/officeDocument/2006/relationships/vmlDrawing
http://schemas.openxmlformats.org/officeDocument/2006/relationships/externalLinkPath	http://schemas.microsoft.com/office/2006/relationships/xlExternalLinkPath/xlPathMissing
http://schemas.openxmlformats.org/officeDocument/2006/relationships/externalLink	http://schemas.openxmlformats.org/officeDocument/2006/relationships/customXml
http://schemas.openxmlformats.org/officeDocument/2006/relationships/customXmlProps	http://schemas.openxmlformats.org/officeDocument/2006/relationships/comments
http://schemas.openxmlformats.org/package/2006/relationships/metadata/core-properties	http://schemas.openxmlformats.org/officeDocument/2006/relationships/extended-properties
http://schemas.openxmlformats.org/officeDocument/2006/relationships/custom-properties	http://schemas.openxmlformats.org/officeDocument/2006/relationships/sharedStrings
http://schemas.openxmlformats.org/officeDocument/2006/relationships/styles	http://schemas.openxmlformats.org/officeDocument/2006/relationships/theme
http://schemas.openxmlformats.org/officeDocument/2006/relationships/chart	http://schemas.microsoft.com/office/2014/relationships/chartEx
http://schemas.openxmlformats.org/officeDocument/2006/relationships/chartsheet	http://schemas.openxmlformats.org/officeDocument/2006/relationships/worksheet
http://purl.oclc.org/ooxml/officeDocument/relationships/worksheet	http://schemas.openxmlformats.org/officeDocument/2006/relationships/dialogsheet
http://schemas.microsoft.com/office/2006/relationships/xlMacrosheet	http://schemas.openxmlformats.org/officeDocument/2006/relationships/image
http://schemas.openxmlformats.org/officeDocument/2006/relationships/drawing	http://schemas.openxmlformats.org/officeDocument/2006/relationships/sheetMetadata
http://schemas.microsoft.com/office/2017/10/relationships/threadedComment	http://schemas.microsoft.com/office/2017/10/relationships/person
http://schemas.microsoft.com/office/2006/relationships/vbaProject	http://docs.oasis-open.org/ns/office/1.2/meta/
http://docs.oasis-open.org/ns/office/1.2/meta/pkg#	http://www.w3.org/1999/02/22-rdf-syntax-ns#
http://schemas.openxmlformats.org/drawingml/2006/main	http://schemas.microsoft.com/office/spreadsheetml/2017/richdata
http://schemas.microsoft.com/office/spreadsheetml/2017/dynamicarray	http://openoffice.org/2004/office
http://openoffice.org/2004/writer	http://openoffice.org/2004/calc
http://www.w3.org/2001/xml-events	http://www.w3.org/2002/xforms

Page 1 of 2

Raw Manifest

{
  "name": "__MSG_appName__",
  "icons": {
    "16": "icon.png",
    "32": "icon.png",
    "48": "icon.png",
    "128": "icon.png"
  },
  "action": {},
  "version": "2.3.0",
  "background": {
    "type": "module",
    "service_worker": "service-worker-loader.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "permissions": [
    "activeTab",
    "tabs",
    "storage",
    "downloads",
    "webRequest"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "assets/index.tsx-loader-eed1dcb7.js"
      ],
      "css": [
        "assets/index-e7cc73d6.css"
      ],
      "matches": [
        "*://*.x.com/*",
        "*://*.twitter.com/*"
      ]
    }
  ],
  "host_permissions": [
    "*://*.x.com/*",
    "*://*.twitter.com/*",
    "*://*.extfox.pro/*"
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "google.svg",
        "logo.svg",
        "icon.svg",
        "excel.svg",
        "csv.svg",
        "x.svg",
        "json.png",
        "youtube.svg",
        "injected.js",
        "discord.svg"
      ],
      "use_dynamic_url": false
    },
    {
      "matches": [
        "*://*.twitter.com/*",
        "*://*.x.com/*"
      ],
      "resources": [
        "assets/constants-6465e3dd.js",
        "assets/browser-75c6efcb.js",
        "assets/content-script-b7df3c71.js"
      ],
      "use_dynamic_url": false
    }
  ]
}

by ✦ Astarte

X Bookmarks Exporter - Export Twitter Bookmarks

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (92 total):

Raw Manifest

Detections

Manifest Findings