CRX aminer
Extension icon

TugaTech

Version 7.0 View in Chrome Web Store

Last scanned: 1 day ago | force re-scan

Extension Details

Developer: https://tugatech.com.pt/
Rating: 5.0 ★ (3 ratings)

Context-Aware Verdict

MEDIUM
Overall Risk
Trust Factors:

The extension comes from TugaTech, a Portuguese technology website with an established domain (tugatech.com.pt). However, the extremely low user count and only 3 ratings raise concerns about its adoption and testing in real-world scenarios. The perfect 5.0 rating from such a small sample size isn't statistically meaningful. The lack of detailed developer information and missing metadata like user count and last update date reduces transparency.

Concerns:

The primary concern is the "Broad Host Permissions" finding, which appears to be a false positive since the extension only requests access to tugatech.com.pt domains, not all websites. The storage and notifications permissions are appropriate for a website companion extension that likely provides updates or enhanced functionality for the TugaTech website. The medium-risk classification for standard permissions like storage and notifications seems overly cautious given the limited scope.

Recommendations:

This extension appears to be a legitimate companion tool for the TugaTech website with appropriately scoped permissions. The risk is primarily from the low adoption rate rather than malicious capabilities. Users can safely install this extension if they regularly visit TugaTech and want enhanced functionality. Consider monitoring for updates and user feedback as the extension matures. Running in a separate profile isn't necessary given the limited scope of permissions.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
MEDIUM
Medium-Risk Permission: notifications
This extension has the notifications permission. Can show notifications.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.