[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Adblock for Youtube™

Version 7.0.6 View in Chrome Web Store

Last scanned: 2 days ago | force re-scan

Extension Details

Rating: 4.4 ★ (367.4K ratings)

Users: 9,000,000

Context-Aware Verdict

CRITICAL

Overall Risk

Trust Factors: The extension has a substantial user base of 9 million users and a solid 4.4-star rating from over 367,000 reviews, suggesting legitimate functionality. The name clearly indicates its purpose as a YouTube ad blocker, which aligns with user expectations.

Concerns: The extension's permission set is extremely broad and concerning for an ad blocker. The combination of tabs, webNavigation, webRequest, and <all_urls> host permissions creates a powerful surveillance capability that extends far beyond YouTube. These permissions allow the extension to monitor all browsing activity, intercept web requests across all websites, and manipulate browser tabs. The webRequest permission is particularly concerning as it can modify network traffic, potentially injecting malicious content or stealing sensitive data. The unlimited storage permission could be used to collect and store extensive browsing data indefinitely.

Recommendations: Given the critical risk level, install this extension only in a separate Chrome profile isolated from sensitive browsing activities. Consider using YouTube Premium or browser-based ad blocking solutions instead. If you must use this extension, regularly audit your browsing data and consider using it only when specifically watching YouTube content. Monitor network activity for unusual data transmission and be cautious about logging into sensitive accounts while this extension is active.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webNavigation

This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Raw Manifest

{
  "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/WmzFe8hcRH9QeTBEDo8cH/4IYaw4DpiYlK6lUlXUPmEX8kkFfugsFMjlqVqHJN44Vhhz0gEWpyxWDYMfMPaJo1lXVGp/PBkf22QjvSvfAeWTGzhCo9020ysg3FeEEztm7yK50qkSNCgqsdRSdZKgy8dqF6YSouJRcYB6y5CZhwIDAQAB",
  "name": "__MSG_extension_name__",
  "icons": {
    "16": "images/icon-16.png",
    "128": "images/icon-128.png"
  },
  "action": {
    "default_icon": {
      "19": "images/icon-19.png",
      "38": "images/icon-38.png"
    },
    "default_popup": "popup.html",
    "default_title": "Adblock for Youtube™"
  },
  "version": "7.0.6",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_extension_description__",
  "permissions": [
    "tabs",
    "storage",
    "unlimitedStorage",
    "scripting",
    "alarms",
    "declarativeNetRequest",
    "webNavigation",
    "webRequest"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "contentscript.js"
      ],
      "run_at": "document_start",
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "all_frames": true
    }
  ],
  "host_permissions": [
    "<all_urls>"
  ],
  "manifest_version": 3
}

by ✦ Astarte

https://fonts.googleapis.com/css?family=Roboto:300	https://chromewebstore.google.com/detail/
https://get.adblock-for-youtube.com	https://api.adblock-for-youtube.com
https://fonts.googleapis.com/css2?family=Montserrat:wght@400	http://www.w3.org/2000/svg
https://get.adblock-for-youtube.com/disable-adblockers	https://get.adblock-for-youtube.com/windows
https://get.adblock-for-youtube.com/android	https://get.adblock-for-youtube.com/iphone
https://clients2.google.com/service/update2/crx

Adblock for Youtube™

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (11 total):

Raw Manifest

Detections

Manifest Findings