CRX aminer
Extension icon

Open in Chromium Browser

Version 0.2.4 View in Chrome Web Store

Last scanned: about 7 hours ago

Extension Details

Rating: 4.2 ★ (13 ratings)
Users: 5,000

Context-Aware Verdict

HIGH
Overall Risk
Trust Factors:

The extension has a relatively small user base of 5,000 users with a decent rating of 4.2 stars, though based on only 13 reviews which limits confidence in the rating. The lack of visible developer information and company details reduces transparency and accountability. The extension's purpose appears to be opening pages in Chromium browser, which is a legitimate use case.

Concerns:

The extension requests several powerful permissions that seem excessive for its stated functionality. The tabs permission allows manipulation of browser tabs and access to sensitive browsing information. The broad content script injection across all URLs is particularly concerning as it enables the extension to read and modify content on every website you visit, including sensitive sites like banking or email platforms. The nativeMessaging permission allows communication with external applications, which could be exploited for malicious purposes. The storage permission, while less critical, allows persistent data collection.

Recommendations:

Given the high-risk permissions and limited transparency about the developer, consider running this extension in a separate Chrome profile to isolate potential security risks from your main browsing activities. Before installation, verify that these extensive permissions are truly necessary for the extension's core functionality. Monitor the extension's behavior closely and consider alternatives with more limited permission requests. If you must use this extension, avoid using it while accessing sensitive websites or personal accounts.

Findings

HIGH
Broad Content Script Injection
This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: contextMenus
This extension has the contextMenus permission. Can add items to the context menu.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.