CRX aminer
[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]
Extension icon

Harmony Web Protection Advanced MV3

Version 990.106.88 View in Chrome Web Store

Last scanned: 20 days ago | force re-scan

Extension Details

Rating: 1.6 ★ (139 ratings)
Users: 1,000,000

Context-Aware Verdict

CRITICAL
Overall Risk
Trust Factors:

The extension has a substantial user base of 1 million users, which suggests some level of adoption. However, the extremely low rating of 1.6 out of 5 stars from 139 reviews is a major red flag, indicating widespread user dissatisfaction or potential issues. The lack of clear developer information and company details raises additional transparency concerns.

Concerns:

The extension exhibits an alarming combination of invasive permissions that far exceed what's typically necessary for web protection. The ability to intercept, modify, and block all web requests combined with access to browsing history, downloads, and identity information creates a perfect storm for data harvesting. The broad host permissions and content script injection capabilities mean this extension can monitor and manipulate every website you visit. The dangerous permission combination of webRequest and webRequestBlocking is particularly concerning as it allows real-time traffic manipulation.

Recommendations:

Given the critical risk level, avoid installing this extension entirely. If you must use it for organizational requirements, run it in a completely isolated Chrome profile with no access to personal accounts or sensitive data. Consider alternative web protection solutions with better ratings and more transparent developers. Monitor your network traffic and accounts for any suspicious activity if you've previously used this extension. The poor user ratings combined with excessive permissions suggest this extension may not function as advertised or could pose security risks.

Findings

HIGH
Broad Content Script Injection
This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
Dangerous Permission Combination: webRequest + webRequestBlocking
This extension can intercept, modify, and block web requests in real-time. This combination could be used to modify sensitive web traffic or steal data.
HIGH
High-Risk Permission: downloads
This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: history
This extension has the history permission. Can access your browsing history. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: identity
This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webNavigation
This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webRequest
This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webRequestBlocking
This extension has the webRequestBlocking permission. Can block and modify web requests in real-time. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: activeTab
This extension has the activeTab permission. Can access the active tab when clicking the extension icon.
MEDIUM
Medium-Risk Permission: contextMenus
This extension has the contextMenus permission. Can add items to the context menu.
MEDIUM
Medium-Risk Permission: notifications
This extension has the notifications permission. Can show notifications.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
MEDIUM
Medium-Risk Permission: unlimitedStorage
This extension has the unlimitedStorage permission. Can store unlimited data locally.
by ✦ Astarte