[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Convert PDF to Excel

Version 3.0.0 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Developer: https://qwerpdf.com/

Rating: 1.8 ★ (9 ratings)

Users: 10,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors: The extension has significant trust issues with only 10,000 users and a very poor rating of 1.8 out of 5 stars from just 9 reviews, indicating user dissatisfaction. The developer website qwerpdf.com lacks established reputation, and the extension's core functionality of PDF to Excel conversion typically doesn't require the extensive permissions granted.

Concerns: The most significant concern is the broad host permissions that allow access to all pages on qwerpdf.com subdomains, which is excessive for a PDF conversion tool that should operate locally or through specific API endpoints. The combination of storage and notifications permissions with broad host access creates potential for data collection and user tracking. The poor user rating suggests the extension may not function as advertised or has other issues. Content scripts running on qwerpdf.com domains could potentially access sensitive user data during file uploads.

Recommendations: Given the high risk level, consider running this extension in a separate Chrome profile if you must use it. However, I strongly recommend finding alternative PDF to Excel conversion tools with better ratings and more restrictive permissions. Look for extensions that operate locally without requiring broad host permissions, or use reputable online conversion services directly through their websites. Always review what data you're uploading when using any file conversion service.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Medium-Risk Permission: notifications

This extension has the notifications permission. Can show notifications.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

notifications
storage

Host Permissions:

https://*.qwerpdf.com/

Embedded URLs (19 total):

http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd	https://qwerpdf.com/
https://p1.qwerpdf.com/api/upload1	https://up1.qwerpdf.com/extupload
https://qwerpdf.com/queue/v2	https://qwerpdf.com/user/taskProcess
https://chrome.google.com/webstore/detail/convert-pdf-to-excel/bhaeffhiollngcgdhoepmdckmeadgnbk	https://microsoftedge.microsoft.com/addons/detail/maammjehokkabchlipgpemdljoemacfj
https://qwerpdf.com	https://www.qwerpdf.com
https://qwerpdf.com/pdf/extdownload/f/	https://qwerpdf.com/pdf/extfileedit/f/
https://qwerpdf.com/user/signin	https://qwerpdf.com/pricing.html
https://qwerpdf.com/__LANG__excel-online.html	https://clients2.google.com/service/update2/crx
https://www.qwerpdf.com/

Raw Manifest

{
  "name": "__MSG_ext_name__",
  "icons": {
    "16": "images/icons/icon16.png",
    "32": "images/icons/icon32.png",
    "48": "images/icons/icon48.png",
    "128": "images/icons/icon128.png"
  },
  "action": {
    "default_icon": "images/icons/icon48.png",
    "default_popup": "index.html",
    "default_title": "__MSG_ext_name__"
  },
  "author": "qwerpdf.com",
  "version": "3.0.0",
  "background": {
    "service_worker": "js/background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_ext_description__",
  "permissions": [
    "notifications",
    "storage"
  ],
  "homepage_url": "https://www.qwerpdf.com/",
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "js/content_script.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*.qwerpdf.com/*"
      ],
      "all_frames": false
    },
    {
      "js": [
        "js/content_script_installed.js"
      ],
      "run_at": "document_end",
      "matches": [
        "*://*.qwerpdf.com/*"
      ],
      "all_frames": false
    }
  ],
  "host_permissions": [
    "https://*.qwerpdf.com/"
  ],
  "manifest_version": 3
}

by ✦ Astarte