[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Леопард

Version 1.6 View in Chrome Web Store

Last scanned: about 7 hours ago

Extension Details

Developer: https://atavi.com/browser-themes/p/leopard/chrome-themes-top/

Rating: 4.6 ★ (123 ratings)

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a decent rating of 4.6 stars from 123 reviews, which suggests user satisfaction. However, several trust indicators are concerning - the extension name "Леопард" (Leopard in Cyrillic) suggests it may be a theme, and the author URL points to Atavi, a known browser customization service. The lack of visible user count, last update date, and developer information raises transparency concerns.

Concerns:

The primary concern is the use of Manifest Version 2, which has weaker security protections compared to the current Manifest V3 standard. This older framework provides extensions with broader access capabilities and fewer restrictions on potentially harmful behaviors. The missing technical details (no visible permissions, content scripts, or background scripts) make it difficult to assess the full scope of what this extension can access or modify in your browser.

Recommendations:

While the overall risk assessment is low, the medium-risk finding regarding the outdated manifest version warrants caution. Consider looking for alternative theme extensions that use Manifest V3 for better security. If you choose to keep this extension, monitor your browser's performance and be alert to any unusual behavior. Running it in a separate Chrome profile could provide additional isolation if you're concerned about security but still want to use the theme.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "app": {
    "urls": [
      "http://atavi.com/browser-themes/"
    ],
    "launch": {
      "web_url": "http://atavi.com/browser-themes/?from=chrome-themes&tid=leopard"
    }
  },
  "link": "http://atavi.com/browser-themes/",
  "name": "__MSG_appName__",
  "theme": {
    "colors": {
      "frame": [
        230,
        230,
        230
      ],
      "toolbar": [
        228,
        228,
        228,
        0.6
      ],
      "ntp_link": [
        0,
        0,
        0
      ],
      "ntp_text": [
        0,
        0,
        0
      ],
      "tab_text": [
        0,
        0,
        0
      ],
      "bookmark_text": [
        0,
        0,
        0
      ],
      "ntp_background": [
        255,
        255,
        255
      ],
      "ntp_link_underline": [
        0,
        0,
        0
      ],
      "tab_background_text": [
        0,
        0,
        0
      ]
    },
    "images": {
      "theme_frame": "images/theme_frame.png",
      "theme_toolbar": "images/theme_toolbar.png",
      "theme_ntp_background": "images/theme_ntp_background.png",
      "theme_tab_background": "images/theme_tab_background.png"
    },
    "properties": {
      "ntp_background_repeat": "no-repeat",
      "ntp_background_alignment": "middle"
    }
  },
  "version": "1.6",
  "short_name": "Awesome theme for Atavi.com",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "default_locale": "ru",
  "manifest_version": 2
}

by ✦ Astarte

Леопард

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Embedded URLs (3 total):

Raw Manifest

Detections

Manifest Findings

https://clients2.google.com/service/update2/crx	http://atavi.com/browser-themes/
http://atavi.com/browser-themes/?from=chrome-themes&tid=leopard