Starting analysis...
Excel Editor Online
Version 3.2.0 View in Chrome Web Store
Extension Details
Context-Aware Verdict
The extension has a moderate user base of 20,000 users but a concerning low rating of 3.4 out of 5 with only 7 reviews, suggesting limited user engagement or satisfaction. The developer operates from qwerpdf.com, which appears to be a PDF-focused service, making the Excel editing functionality somewhat outside their apparent core competency. The lack of detailed developer information and sparse user feedback raises questions about transparency and reliability.
The most significant concern is the broad host permissions that allow access to all pages on the qwerpdf.com domain, which could potentially be exploited if the website is compromised or malicious. While the notifications and storage permissions are reasonable for an Excel editor that might need to save work and alert users, the extension's functionality appears limited to working within the developer's website ecosystem rather than providing standalone Excel editing capabilities. The low rating despite moderate usage suggests potential functionality or security issues that users have encountered.
Consider running this extension in a separate Chrome profile to isolate potential risks. Before installing, verify the legitimacy of qwerpdf.com and review their privacy policy. Look for alternative Excel editing extensions with better ratings and more transparent developers. If you must use this extension, avoid accessing sensitive websites while it's active, and regularly review what data it may be storing locally.
Findings
Security Analysis Details
Required Permissions:
- notifications
- storage
Host Permissions:
- https://*.qwerpdf.com/
Embedded URLs (21 total):
| http://www.w3.org/2000/svg | http://www.w3.org/1999/xlink | |
| http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd | https://qwerpdf.com/ | |
| https://p1.qwerpdf.com/api/upload1 | https://up1.qwerpdf.com/extupload | |
| https://qwerpdf.com/queue/v2 | https://qwerpdf.com/user/taskProcess | |
| https://chrome.google.com/webstore/detail/excel-editor-online/ahibepkhmaepihjpbddebpdhfoecghfd | https://microsoftedge.microsoft.com/addons/detail/obhngdiabnhbnkgcdceoilonapmmeeip | |
| https://qwerpdf.com | https://www.qwerpdf.com | |
| https://qwerpdf.com/pdf/extdownload/f/ | https://qwerpdf.com/pdf/extfileedit/f/ | |
| https://qwerpdf.com/user/signin | https://qwerpdf.com/pricing.html | |
| https://qwerpdf.com/__LANG__excel-online-editor.html | https://qwerpdf.com/__LANG__excel-online-create.html | |
| https://qwerpdf.com/__LANG__excel-viewer.html | https://clients2.google.com/service/update2/crx | |
| https://www.qwerpdf.com/ |
Raw Manifest
{ "name": "__MSG_ext_name__", "icons": { "16": "images/icons/icon16.png", "32": "images/icons/icon32.png", "48": "images/icons/icon48.png", "128": "images/icons/icon128.png" }, "action": { "default_icon": "images/icons/icon48.png", "default_popup": "index.html", "default_title": "__MSG_ext_name__" }, "author": "qwerpdf.com", "version": "3.2.0", "background": { "service_worker": "js/background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_ext_description__", "permissions": [ "notifications", "storage" ], "homepage_url": "https://www.qwerpdf.com/", "default_locale": "en", "content_scripts": [ { "js": [ "js/content_script.js" ], "run_at": "document_start", "matches": [ "*://*.qwerpdf.com/*" ], "all_frames": false }, { "js": [ "js/content_script_installed.js" ], "run_at": "document_end", "matches": [ "*://*.qwerpdf.com/*" ], "all_frames": false } ], "host_permissions": [ "https://*.qwerpdf.com/" ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.