DPlus Party - Disney Plus Watch Party
Version 1.4.4 View in Chrome Web Store
Last scanned: about 15 hours ago
Extension Details
Rating:
3.9 ★
(66 ratings)
Users:
10,000
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
MEDIUM
Risk Level
Trust Factors:
- The extension has a decent number of users (10,000), which suggests some level of trust and popularity.
- The rating of 3.9 out of 5 stars from 66 reviews is relatively positive, indicating general user satisfaction.
Concerns:
- The extension requests the "activeTab" permission, which allows it to access the currently active tab's content. While this permission is often necessary for extensions that interact with web pages, it can potentially be misused to access sensitive information.
- The "storage" permission allows the extension to store data locally, which could be a privacy concern if the extension collects and stores user data without proper consent or disclosure.
- The extension is using the older Manifest Version 2, which has fewer security restrictions compared to the newer Manifest Version 3. This could potentially expose users to security risks or vulnerabilities that have been addressed in the newer version.
Recommendations:
- Review the extension's privacy policy and terms of service to understand how it handles user data and what information it collects or stores.
- Consider running the extension in a separate Chrome profile or incognito mode to isolate it from your main browsing session and minimize potential risks.
- Monitor the extension's behavior and check for any suspicious activities or unexpected data access.
- Keep an eye on updates from the developer, as they may release a version compatible with Manifest Version 3, which could address some security concerns.
- If you have concerns about the extension's permissions or behavior, consider uninstalling it and finding an alternative with better security practices or from a more reputable developer.
Security Analysis
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
MEDIUM
Overall Risk
Based on 3 total findings, ranked without considering overall context, including 0 high-risk and 3 medium-risk findings.
MEDIUM
Medium-Risk Permission: activeTab
This extension has the activeTab permission. Can access the active tab when clicking the extension icon.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
MEDIUM
Older Manifest Version
This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.
Security Analysis Details
Required Permissions:
- activeTab
- declarativeContent
- storage
Embedded URLs (11 total):
| https://storage.ko-fi.com/cdn/cup-border.png | https://storage.ko-fi.com/cdn/whitelogo.svg | |
| http://peerjs.com | https://twemoji.maxcdn.com/v/12.1.5/ | |
| http://www.w3.org/2000/svg | https://api.twilio.com/2010-04-01/Accounts/AC63d00eeedd221face0516f38d5f3000c/Tokens.json | |
| https://chrome.google.com/webstore/detail/dplus-party/ckhlohlbolmihakbnlddceackadnodoe | https://ko-fi.com/Q5Q41QKG2 | |
| https://clients2.google.com/service/update2/crx | https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css | |
| https://ko-fi.com/dplusparty |
Raw Manifest
{ "name": "DPlus Party - Disney Plus Watch Party", "icons": { "128": "images/dplus.png" }, "version": "1.4.4", "background": { "scripts": [ "background.js" ] }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Watch Disney+ (Disney Plus) together anywhere, anytime with DPlus Party!", "page_action": { "default_popup": "popup.html" }, "permissions": [ "activeTab", "declarativeContent", "storage" ], "manifest_version": 2, "web_accessible_resources": [ "dplus_chat.css", "jquery-3.4.1.min.js" ] }
Secure Annex (beta)
Coming soon...