[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

uBlock

Version 25.5.0 View in Chrome Web Store

Last scanned: about 11 hours ago

Extension Details

Developer: https://www.ublock.org/

Rating: 3.4 ★ (2.3K ratings)

Users: 1,000,000

Context-Aware Verdict

CRITICAL

Overall Risk

Trust Factors:

The extension has a significant user base of 1 million users, which suggests some level of community acceptance. However, several concerning factors undermine trust: the relatively low rating of 3.4 out of 5 stars with 2,300 reviews indicates user dissatisfaction, the generic name "uBlock" (without "Origin") may be attempting to capitalize on the reputation of the legitimate uBlock Origin extension, and the developer information is minimal with only a website URL provided.

Concerns:

The extension's permission set is extremely broad and powerful for an ad blocker. The combination of webRequest, webNavigation, and universal host permissions creates a perfect storm for comprehensive web traffic monitoring and manipulation. The tabs permission allows manipulation of browser tabs beyond what's necessary for basic ad blocking. The unlimitedStorage permission is excessive and could be used to hoard user data indefinitely. Most concerning is that this appears to be a potential impersonator of the legitimate uBlock Origin extension, which could be a deliberate attempt to deceive users.

Recommendations:

Do not install this extension. Instead, use the legitimate "uBlock Origin" by Raymond Hill, which has better ratings and established reputation. If you've already installed this extension, remove it immediately and scan your system for potential security issues. Consider using a separate Chrome profile for testing suspicious extensions in the future, and always verify extension authenticity through official sources before installation.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webNavigation

This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

alarms
declarativeNetRequest
declarativeNetRequestFeedback
tabs
webRequest
webNavigation
storage
unlimitedStorage
scripting

Optional Permissions:

declarativeNetRequestWithHostAccess

Host Permissions:

*://*/*

Embedded URLs (4142 total):

http://mozilla.org/MPL/2.0/.	https://github.com/mozilla/webextension-polyfill/issues/130
https://ublock.org	https://help.ublock.org
https://github.com/then/is-promise/blob/master/index.js	https://github.com/then/is-promise/blob/master/LICENSE
https://svelte.dev/docs/svelte-store#get	http://www.w3.org/2000/svg
http://www.w3.org/1999/xlink	https://github.com/sveltejs/svelte/issues/4233
https://svelte.dev/docs/svelte#beforeupdate	https://svelte.dev/docs#run-time-server-side-component-api
https://svelte.dev/docs/svelte#onmount	https://svelte.dev/docs/svelte#afterupdate
https://svelte.dev/docs/svelte#ondestroy	https://svelte.dev/docs#template-syntax-component-directives-on-eventname
https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent	https://developer.mozilla.org/en-US/docs/Learn/JavaScript/Building_blocks/Events#Event_bubbling_and_capture
https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/detail	https://svelte.dev/docs/svelte#createeventdispatcher
https://svelte.dev/docs/svelte#setcontext	https://svelte.dev/docs/svelte#getcontext
https://svelte.dev/docs/svelte#getallcontexts	https://svelte.dev/docs/svelte#hascontext
https://svelte.dev/docs/svelte-compiler#svelte-version	https://www.gnu.org/licenses/gpl-3.0.en.html
https://ublock.org/en/privacy	https://support.ublock.org/
http://vectornator.io/	http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd
http://vectornator.io	https://tools.ietf.org/html/rfc7230#section-3.2
https://github.com/github/fetch/issues/748	https://github.com/zloirock/core-js/issues/751
http://www.example.com	https://docs.sentry.io/platforms/javascript/best-practices/browser-extensions/
https://github.com/uuidjs/uuid#getrandomvalues-not-supported	https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
https://github.com/nodeca/pako	https://notification.adblockplus.org/notification.json
https://adblockplus.org/getSubscription?version=%VERSION%&url=%SUBSCRIPTION%&downloadURL=%URL%&error=%ERROR%&responseStatus=%RESPONSESTATUS%	https://easylist-downloads.adblockplus.org/exceptionrules.txt
https://easylist-downloads.adblockplus.org/v3/full/exceptionrules.txt	https://easylist-downloads.adblockplus.org/exceptionrules-privacy-friendly.txt
https://easylist-downloads.adblockplus.org/v3/full/exceptionrules-privacy-friendly.txt	http://abpindo.blogspot.com/
https://easylist-downloads.adblockplus.org/v3/full/abpindo+easylist.txt	https://easylist-downloads.adblockplus.org/abpindo+easylist.txt
http://abpvn.com/	https://easylist-downloads.adblockplus.org/v3/full/abpvn+easylist.txt
https://easylist-downloads.adblockplus.org/abpvn+easylist.txt	https://stanev.org/abp/
https://easylist-downloads.adblockplus.org/v3/full/bulgarian_list+easylist.txt	https://easylist-downloads.adblockplus.org/bulgarian_list+easylist.txt
https://github.com/DandelionSprout/adfilt	https://easylist-downloads.adblockplus.org/v3/full/dandelion_sprouts_nordic_filters+easylist.txt
https://easylist-downloads.adblockplus.org/dandelion_sprouts_nordic_filters+easylist.txt	https://easylist.to/
https://easylist-downloads.adblockplus.org/v3/full/easylist.txt	https://easylist-downloads.adblockplus.org/easylist.txt
https://github.com/easylist/easylistchina/	https://easylist-downloads.adblockplus.org/v3/full/easylistchina+easylist.txt
https://easylist-downloads.adblockplus.org/easylistchina+easylist.txt	https://adblock.sk/
https://easylist-downloads.adblockplus.org/v3/full/easylistczechslovak+easylist.txt	https://easylist-downloads.adblockplus.org/easylistczechslovak+easylist.txt
https://easylist-downloads.adblockplus.org/v3/full/easylistdutch+easylist.txt	https://easylist-downloads.adblockplus.org/easylistdutch+easylist.txt
https://easylist-downloads.adblockplus.org/v3/full/easylistgermany+easylist.txt	https://easylist-downloads.adblockplus.org/easylistgermany+easylist.txt
https://github.com/easylist/EasyListHebrew	https://easylist-downloads.adblockplus.org/v3/full/israellist+easylist.txt
https://easylist-downloads.adblockplus.org/israellist+easylist.txt	https://easylist-downloads.adblockplus.org/v3/full/easylistitaly+easylist.txt
https://easylist-downloads.adblockplus.org/easylistitaly+easylist.txt	https://github.com/EasyList-Lithuania/easylist_lithuania
https://easylist-downloads.adblockplus.org/v3/full/easylistlithuania+easylist.txt	https://easylist-downloads.adblockplus.org/easylistlithuania+easylist.txt
https://easylist-downloads.adblockplus.org/v3/full/easylistpolish+easylist.txt	https://easylist-downloads.adblockplus.org/easylistpolish+easylist.txt

Page 1 of 52

Raw Manifest

{
  "name": "__MSG_name__",
  "icons": {
    "16": "icons/icon-16.png",
    "128": "icons/icon-128.png"
  },
  "action": {
    "default_icon": "icons/icon-128.png",
    "default_popup": "popup.html",
    "default_title": "uBlock"
  },
  "version": "25.5.0",
  "background": {
    "type": "module",
    "service_worker": "assets/worker/service-jJz2UCeQ.js"
  },
  "options_ui": {
    "page": "options.html"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_description__",
  "permissions": [
    "alarms",
    "declarativeNetRequest",
    "declarativeNetRequestFeedback",
    "tabs",
    "webRequest",
    "webNavigation",
    "storage",
    "unlimitedStorage",
    "scripting"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "ewe-content.js"
      ],
      "run_at": "document_start",
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "all_frames": true,
      "match_about_blank": true
    }
  ],
  "host_permissions": [
    "*://*/*"
  ],
  "manifest_version": 3,
  "optional_permissions": [
    "declarativeNetRequestWithHostAccess"
  ],
  "minimum_chrome_version": "118.0",
  "declarative_net_request": {
    "rule_resources": [
      {
        "id": "07549D8B-F06F-4D9D-A567-929AA59E9D1D",
        "path": "rulesets/07549D8B-F06F-4D9D-A567-929AA59E9D1D",
        "enabled": false
      },
      {
        "id": "0798B6A2-94A4-4ADF-89ED-BEC112FC4C7F",
        "path": "rulesets/0798B6A2-94A4-4ADF-89ED-BEC112FC4C7F",
        "enabled": false
      },
      {
        "id": "0CD3D105-D3B3-4652-8489-94163DE9A08F",
        "path": "rulesets/0CD3D105-D3B3-4652-8489-94163DE9A08F",
        "enabled": false
      },
      {
        "id": "14DF7BE6-9675-4E07-987A-D8A1000F9FEF",
        "path": "rulesets/14DF7BE6-9675-4E07-987A-D8A1000F9FEF",
        "enabled": false
      },
      {
        "id": "1B5F78CA-8B30-4BDF-B0A3-451CB2202984",
        "path": "rulesets/1B5F78CA-8B30-4BDF-B0A3-451CB2202984",
        "enabled": false
      },
      {
        "id": "1C571EC7-6E52-47CC-B04A-4B3008D0AEBE",
        "path": "rulesets/1C571EC7-6E52-47CC-B04A-4B3008D0AEBE",
        "enabled": false
      },
      {
        "id": "25A31255-AB36-48A4-9086-06192DE71119",
        "path": "rulesets/25A31255-AB36-48A4-9086-06192DE71119",
        "enabled": false
      },
      {
        "id": "2708BCB7-2E45-41BC-B517-1730CF532F89",
        "path": "rulesets/2708BCB7-2E45-41BC-B517-1730CF532F89",
        "enabled": false
      },
      {
        "id": "2CEA1481-C29C-44F1-A084-A2A019533797",
        "path": "rulesets/2CEA1481-C29C-44F1-A084-A2A019533797",
        "enabled": false
      },
      {
        "id": "361001BD-8F57-4736-97B1-F332C3D79E5D",
        "path": "rulesets/361001BD-8F57-4736-97B1-F332C3D79E5D",
        "enabled": false
      },
      {
        "id": "3D2C09D0-DF1C-4C8E-9947-A23DCEAF8F8B",
        "path": "rulesets/3D2C09D0-DF1C-4C8E-9947-A23DCEAF8F8B",
        "enabled": false
      },
      {
        "id": "4B6CE485-30AB-4213-AD17-504B3F2D2825",
        "path": "rulesets/4B6CE485-30AB-4213-AD17-504B3F2D2825",
        "enabled": false
      },
      {
        "id": "684A25C6-6B5D-458A-8A2B-BAC0A12B0B15",
        "path": "rulesets/684A25C6-6B5D-458A-8A2B-BAC0A12B0B15",
        "enabled": false
      },
      {
        "id": "88D3F7EA-D99E-43C6-92E0-D89C8A0E7EA9",
        "path": "rulesets/88D3F7EA-D99E-43C6-92E0-D89C8A0E7EA9",
        "enabled": false
      },
      {
        "id": "8C13E995-8F06-4927-BEA7-6C845FB7EEBF",
        "path": "rulesets/8C13E995-8F06-4927-BEA7-6C845FB7EEBF",
        "enabled": false
      },
      {
        "id": "950C88EA-2DD1-42E3-B2A2-2DF2ED15563A",
        "path": "rulesets/950C88EA-2DD1-42E3-B2A2-2DF2ED15563A",
        "enabled": false
      },
      {
        "id": "96932CD9-6DDF-4D97-B92F-FDF747B6FAA2",
        "path": "rulesets/96932CD9-6DDF-4D97-B92F-FDF747B6FAA2",
        "enabled": false
      },
      {
        "id": "9BD3EA2F-889D-4CC3-B680-CF484F2BD1B9",
        "path": "rulesets/9BD3EA2F-889D-4CC3-B680-CF484F2BD1B9",
        "enabled": false
      },
      {
        "id": "A4B88FB6-E5E5-417F-8A49-20B8244995FD",
        "path": "rulesets/A4B88FB6-E5E5-417F-8A49-20B8244995FD",
        "enabled": false
      },
      {
        "id": "B7D76369-DD19-4602-80E8-2E32DDB490AC",
        "path": "rulesets/B7D76369-DD19-4602-80E8-2E32DDB490AC",
        "enabled": false
      },
      {
        "id": "BBC07C05-66F1-42EC-BD4D-7AD495FAC84B",
        "path": "rulesets/BBC07C05-66F1-42EC-BD4D-7AD495FAC84B",
        "enabled": false
      },
      {
        "id": "C3D13A19-3E8D-41F5-AD64-0F3B36DDE128",
        "path": "rulesets/C3D13A19-3E8D-41F5-AD64-0F3B36DDE128",
        "enabled": false
      },
      {
        "id": "CBE50FA2-DE3F-480C-B1D7-04289391C033",
        "path": "rulesets/CBE50FA2-DE3F-480C-B1D7-04289391C033",
        "enabled": false
      },
      {
        "id": "D4028CDD-3D39-4624-ACC7-8140F4EC3238",
        "path": "rulesets/D4028CDD-3D39-4624-ACC7-8140F4EC3238",
        "enabled": false
      },
      {
        "id": "D99D3350-7F11-43E1-87CB-FDE0C78E8CD6",
        "path": "rulesets/D99D3350-7F11-43E1-87CB-FDE0C78E8CD6",
        "enabled": false
      },
      {
        "id": "E22C3B40-DC90-49D7-8BF5-E60904AB159A",
        "path": "rulesets/E22C3B40-DC90-49D7-8BF5-E60904AB159A",
        "enabled": false
      },
      {
        "id": "EEEF75EC-B2B4-49F4-BC49-17B08266F334",
        "path": "rulesets/EEEF75EC-B2B4-49F4-BC49-17B08266F334",
        "enabled": false
      },
      {
        "id": "EF6F4884-47DB-46A5-AAF8-8EB819D8D4D8",
        "path": "rulesets/EF6F4884-47DB-46A5-AAF8-8EB819D8D4D8",
        "enabled": false
      },
      {
        "id": "F12E0801-A00B-49DE-B1E3-52C9C4F90C8C",
        "path": "rulesets/F12E0801-A00B-49DE-B1E3-52C9C4F90C8C",
        "enabled": false
      }
    ]
  }
}

by ✦ Astarte

uBlock

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Host Permissions:

Embedded URLs (4142 total):

Raw Manifest

Detections

Manifest Findings