The extension comes from TugaTech, a Portuguese technology website with an established domain (tugatech.com.pt). However, the extremely low user count and only 3 ratings raise concerns about its adoption and testing in real-world scenarios. The perfect 5.0 rating from such a small sample size isn't statistically meaningful. The lack of detailed developer information and missing metadata like user count and last update date reduces transparency.
The primary concern is the "Broad Host Permissions" finding, which appears to be a false positive since the extension only requests access to tugatech.com.pt domains, not all websites. The storage and notifications permissions are appropriate for a website companion extension that likely provides updates or enhanced functionality for the TugaTech website. The medium-risk classification for standard permissions like storage and notifications seems overly cautious given the limited scope.
This extension appears to be a legitimate companion tool for the TugaTech website with appropriately scoped permissions. The risk is primarily from the low adoption rate rather than malicious capabilities. Users can safely install this extension if they regularly visit TugaTech and want enhanced functionality. Consider monitoring for updates and user feedback as the extension matures. Running in a separate profile isn't necessary given the limited scope of permissions.
| https://tugatech.com.pt | https://rss.tugatech.com.pt | |
| https://rss.tugatech.com.pt/bot-fb-hardware | https://rss.tugatech.com.pt/bot-fb-software | |
| https://rss.tugatech.com.pt/bot-fb-internet | http://getbootstrap.com | |
| https://github.com/twbs/bootstrap/blob/master/LICENSE | https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css | |
| https://fonts.googleapis.com/css?family=PT+Sans:400 | http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd | |
| http://www.w3.org/2000/svg | http://jscrollpane.kelvinluck.com/ | |
| http://brandonaaron.net | http://adomas.org/javascript-mouse-wheel/ | |
| http://www.mathias-bank.de | https://twitter.com/share?url= | |
| https://www.facebook.com/sharer/sharer.php?u= | https://plus.google.com/share?url= | |
| https://clients2.google.com/service/update2/crx | https://chrome.google.com/webstore/detail/tugatech/gdnagjbkdncmcbamjphddeojagmepgdo/reviews | |
| https://play.google.com/store/apps/details?id=com.appbuilder.u10837p15559&pcampaignid=MKT-Other-global-all-co-prtnr-py-PartBadge-Mar2515-1 |
{ "name": "TugaTech", "icons": { "16": "img/icon-16.png", "48": "img/icon-48.png", "128": "img/icon-128.png" }, "action": { "default_icon": "img/icon.png", "default_popup": "popup.html" }, "version": "7.0", "background": { "service_worker": "js/background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Aceda às notícias do TugaTech de forma simples e rápida", "permissions": [ "storage", "alarms", "notifications" ], "options_page": "options.html", "default_locale": "pt_PT", "host_permissions": [ "*://*.tugatech.com.pt/*" ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.