The extension shows several concerning trust indicators. With only 1 rating despite having 100,000 users, this suggests either artificially inflated user numbers or suppressed user feedback. The perfect 5.0 rating from a single review is highly suspicious for an extension with this user base. The lack of developer information and empty description field are major red flags that indicate poor transparency and accountability.
The extension requests an extremely dangerous combination of permissions that far exceed what most legitimate extensions require. The identity and identity.email permissions combined with broad host access create a perfect storm for data harvesting and account compromise. The downloads permission alongside scripting capabilities could enable malicious file distribution. The nativeMessaging permission is particularly concerning as it allows communication with native applications on your system, potentially bypassing browser security boundaries. The <all_urls> host permission grants unrestricted access to every website you visit, enabling comprehensive tracking and data theft.
Do not install this extension under any circumstances. The permission set combined with lack of transparency suggests this is likely malicious software. If already installed, remove it immediately and consider running a security scan. The broad permissions could have compromised sensitive accounts, so review recent account activity and consider changing passwords for important services. If you absolutely must test similar functionality, use a completely isolated browser profile with no access to personal accounts or sensitive data.
| http://sheetjs.com | https://github.com/markedjs/marked. | |
| https://app.mind.io/ | https://api.mind.io | |
| https://mind.io/anywhere/ | https://clients2.google.com/service/update2/crx |
{ "name": "MIND", "icons": { "16": "icons/online_16.png", "32": "icons/online_32.png", "48": "icons/online_48.png", "128": "icons/online_128.png" }, "action": { "default_icon": { "16": "icons/offline_16.png", "32": "icons/offline_32.png", "48": "icons/offline_48.png", "128": "icons/offline_128.png" } }, "version": "2.152.1", "background": { "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "MIND Security Endpoint", "permissions": [ "identity", "identity.email", "downloads", "scripting", "alarms", "storage", "nativeMessaging", "contextMenus" ], "host_permissions": [ "<all_urls>" ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.