[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Vertical Tabs

Version 2.2.12 View in Chrome Web Store

Last scanned: about 20 hours ago

Extension Details

Developer: samihaddad.dev

Rating: 4.1 ★ (231 ratings)

Users: 80,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension has a solid user base of 80,000 users and maintains a decent 4.1-star rating from 231 reviews, indicating general user satisfaction. The developer uses a professional domain (samihaddad.dev) which suggests some level of legitimacy. The extension serves a clear, specific purpose of providing vertical tab functionality, which is a common user request for Chrome.

Concerns: The primary concern is the "tabs" permission, which grants broad access to browser tab information and manipulation capabilities. While this permission is functionally necessary for a vertical tabs extension to work properly, it represents the highest risk factor as it could theoretically be misused to monitor browsing activity or manipulate tabs maliciously. The storage permission, while lower risk, allows the extension to persist data locally. The contextMenus permission is relatively benign for this type of extension.

Recommendations: Given the medium risk level, consider running this extension in a separate Chrome profile if you handle sensitive information in your main browsing session. Monitor the extension's behavior after installation to ensure it only affects tab display and doesn't exhibit unexpected behaviors. Regularly check for updates and review any new permissions requested in future versions. The risk is primarily theoretical given the extension's legitimate purpose, but the tabs permission warrants caution with sensitive browsing activities.

Findings

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

sidePanel
tabs
tabGroups
storage
favicon
contextMenus

Embedded URLs (20 total):

https://github.com/samihaddad/vertical-tabs-chrome-extension/issues/new/choose	https://chrome.google.com/webstore/detail/vertical-tabs/efobhjmgoddhfdhaflheioeagkcknoji/reviews#:~:text=Rate%20this%20extension
https://buymeacoffee.com/samihaddad	https://reactjs.org/docs/error-decoder.html?invariant=
http://www.w3.org/1999/xlink	http://www.w3.org/XML/1998/namespace
http://www.w3.org/2000/svg	http://www.w3.org/1998/Math/MathML
http://www.w3.org/1999/xhtml	https://github.com/styled-components/styled-components/blob/main/packages/styled-components/src/utils/errors.md#
https://mui.com/production-error/?code=	https://github.com/cssinjs/jss
http://www.example.com	https://docs.sentry.io/platforms/javascript/best-practices/browser-extensions/
https://cdn.growthbook.io	https://rt.growthbook.io/?key=
https://9a9d2bc429005120a90f6fac9e6993fd@o605456.ingest.sentry.io/4505710903230464	https://www.google-analytics.com/mp/collect
https://www.google-analytics.com/debug/mp/collect	https://clients2.google.com/service/update2/crx

Raw Manifest

{
  "name": "__MSG_ext_name__",
  "icons": {
    "16": "assets/icons/16.png",
    "48": "assets/icons/48.png",
    "128": "assets/icons/128.png"
  },
  "action": {
    "default_icon": {
      "19": "assets/icons/19.png",
      "38": "assets/icons/38.png"
    },
    "default_title": "Vertical Tabs"
  },
  "version": "2.2.12",
  "commands": {
    "_execute_action": {
      "suggested_key": {
        "default": "Alt+B"
      }
    }
  },
  "background": {
    "type": "module",
    "service_worker": "service-worker-loader.js"
  },
  "side_panel": {
    "default_path": "index.html"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_ext_description__",
  "permissions": [
    "sidePanel",
    "tabs",
    "tabGroups",
    "storage",
    "favicon",
    "contextMenus"
  ],
  "default_locale": "en",
  "manifest_version": 3
}

by ✦ Astarte

Vertical Tabs

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (20 total):

Raw Manifest

Detections

Manifest Findings