[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

QR Code Scanner

Version 1.1 View in Chrome Web Store

Last scanned: about 10 hours ago

Extension Details

Rating: 4.0 ★ (8 ratings)

Users: 4,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a modest user base of 4,000 users with a decent 4.0-star rating, though based on only 8 reviews which limits confidence in the rating's reliability. The lack of developer information and company details raises transparency concerns. The extension uses Manifest V3, which is positive for security standards.

Concerns:

- Missing developer information creates accountability issues

- Very limited review sample size (8 reviews) makes the rating less reliable

- The activeTab permission, while appropriate for a QR code scanner that needs to access webpage content, still allows the extension to read and modify content on any tab when activated

- No clear indication of data handling practices or privacy policy

- Relatively small user base may indicate less community vetting

Recommendations:

Given the medium risk level, consider running this extension in a separate Chrome profile if you frequently handle sensitive information. Before installing, verify that you actually need QR code scanning functionality that requires webpage access - many QR codes can be scanned using your phone's camera instead. If you do install it, be mindful of which tabs are active when using the extension, and avoid using it on pages containing sensitive personal or financial information. Consider looking for alternative QR code scanners with more established developers and larger user bases if this functionality is essential to your workflow.

Findings

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

Raw Manifest

{
  "name": "QR Code Scanner",
  "icons": {
    "16": "images/icon.png",
    "32": "images/icon.png",
    "48": "images/icon.png",
    "128": "images/icon.png"
  },
  "action": {
    "default_icon": {
      "16": "images/icon.png",
      "32": "images/icon.png",
      "48": "images/icon.png",
      "128": "images/icon.png"
    },
    "default_popup": "src/popup.html"
  },
  "version": "1.1",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Scans QR codes on any web page or PDF",
  "permissions": [
    "activeTab"
  ],
  "manifest_version": 3,
  "content_security_policy": {},
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "src/scanner*",
        "*.html"
      ]
    }
  ]
}

by ✦ Astarte

QR Code Scanner

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (3 total):

Raw Manifest

Detections

Manifest Findings

https://clients2.google.com/service/update2/crx	https://github.com/nimiq/qr-scanner
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css