CRX aminer
Extension icon

TSQ Utilities

Version 0.1.11 View in Chrome Web Store

Last scanned: about 10 hours ago

Extension Details

Rating: 3.5 ★
Users: 419

Context-Aware Verdict

CRITICAL
Overall Risk
Trust Factors:

The extension has very limited trust indicators with only 419 users and a modest 3.5-star rating. The lack of developer information, company details, and unclear description raises significant transparency concerns. The low user base suggests limited community vetting, and the absence of clear functionality description makes it difficult to assess legitimate use cases.

Concerns:

The extension requests an extremely broad set of permissions that appear excessive for most legitimate utilities. The combination of cookies access, tabs manipulation, and universal host permissions creates a powerful surveillance and data collection capability. The ability to inject content scripts into all websites means it can potentially capture sensitive information like passwords, financial data, and personal communications. The vague name "TSQ Utilities" provides no clear indication of what specific utility functions justify these extensive permissions.

Recommendations:

Do not install this extension due to its critical risk level. If you absolutely must use it, create a completely separate Chrome profile with no saved passwords, personal data, or access to sensitive websites. Consider using a virtual machine for additional isolation. Before installation, research the developer thoroughly and verify the extension's legitimate purpose. Look for alternative extensions with more transparent developers and limited, appropriate permissions. Monitor your accounts for any suspicious activity if you've previously used this extension.

Findings

HIGH
Broad Content Script Injection
This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: cookies
This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: activeTab
This extension has the activeTab permission. Can access the active tab when clicking the extension icon.