CRX aminer
[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]
Extension icon

Wildfire

Version 1.3.10 View in Chrome Web Store

Last scanned: about 5 hours ago

Extension Details

Developer: http://wildfire.ai/
Rating: 3.7 ★ (96 ratings)
Users: 9,000

Context-Aware Verdict

CRITICAL
Overall Risk
Trust Factors:

The extension has a moderate user base of 9,000 users and a below-average rating of 3.7 stars from 96 reviews, which suggests user dissatisfaction or concerns. The developer website (wildfire.ai) provides some legitimacy, but the lack of detailed developer information and the concerning permission set raises significant trust issues.

Concerns:

This extension exhibits extremely dangerous permission combinations that far exceed what most legitimate extensions require. The combination of webRequest and webRequestBlocking permissions allows complete interception and modification of all web traffic. The debugger permission is particularly alarming as it can manipulate other browser components. Clipboard access permissions enable reading and writing sensitive copied data. The proxy permission allows routing all traffic through attacker-controlled servers. The unsafe-eval CSP policy creates additional security vulnerabilities by allowing dynamic code execution. The all_urls permission grants access to every website you visit, creating a comprehensive surveillance capability.

Recommendations:

Do not install this extension under any circumstances given its critical risk level. If you must use it for specific business purposes, run it in a completely isolated Chrome profile with no access to personal accounts or sensitive data. Monitor network traffic carefully for any suspicious proxy configurations. Consider alternative extensions with more limited permission sets that can accomplish similar functionality. The permission combination suggests potential malware or data harvesting capabilities that pose severe privacy and security risks.

Findings

HIGH
Dangerous Permission Combination: webRequest + webRequestBlocking
This extension can intercept, modify, and block web requests in real-time. This combination could be used to modify sensitive web traffic or steal data.
HIGH
High-Risk Permission: <all_urls>
This extension has the <all_urls> permission. Can access all websites and their content. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: clipboardRead
This extension has the clipboardRead permission. Can read clipboard content. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: clipboardWrite
This extension has the clipboardWrite permission. Can modify clipboard content. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: cookies
This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: debugger
This extension has the debugger permission. Can debug and manipulate other extensions/apps. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: proxy
This extension has the proxy permission. Can control proxy settings. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webNavigation
This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webRequest
This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webRequestBlocking
This extension has the webRequestBlocking permission. Can block and modify web requests in real-time. This could potentially be used maliciously to compromise security or privacy.
HIGH
Unsafe JavaScript Evaluation
This extension's Content Security Policy allows 'unsafe-eval', which permits dynamic JavaScript code execution using eval() and similar functions. This is a significant security risk as it could allow execution of malicious code.
MEDIUM
Medium-Risk Permission: contextMenus
This extension has the contextMenus permission. Can add items to the context menu.
MEDIUM
Medium-Risk Permission: notifications
This extension has the notifications permission. Can show notifications.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
MEDIUM
Medium-Risk Permission: unlimitedStorage
This extension has the unlimitedStorage permission. Can store unlimited data locally.
MEDIUM
Older Manifest Version
This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.
by ✦ Astarte