Christmas Lights

Version 1.0 View in Chrome Web Store

Last scanned: about 1 month ago | force re-scan

Extension Details

Developer: https://www.chromethemer.com/

Rating: 4.6 ★ (19 ratings)

Users: 2,000

Context-Aware Verdict

LOW

Overall Risk

Trust Factors:

The extension appears to be a simple Christmas-themed decoration tool from ChromeThemer.com, which is a known developer of Chrome themes and visual customization extensions. With 2,000 users and a solid 4.6-star rating from 19 reviews, it shows reasonable user satisfaction. The straightforward nature of a Christmas lights decoration extension aligns with what users would expect from this type of cosmetic enhancement.

Concerns:

The primary concern is the use of Manifest Version 2, which has weaker security protections compared to the newer Manifest V3 standard. However, the technical analysis shows no permissions, host permissions, content scripts, or background scripts listed, which suggests minimal system access. The lack of detailed technical information makes it difficult to fully assess what the extension actually does beyond its decorative purpose.

Recommendations:

This extension presents low risk for casual use. Users can safely install it for seasonal decoration purposes. However, consider looking for similar extensions that have upgraded to Manifest V3 for better security practices. Monitor the extension for any updates that might change its permission requirements. Given the seasonal nature, users should remember to disable or remove it after the holiday season to maintain good browser hygiene and reduce unnecessary extensions running in the background.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "name": "Christmas Lights",
  "icons": {
    "128": "icon128.png"
  },
  "theme": {
    "tints": {
      "frame": [
        255.0,
        255.0,
        0.44
      ],
      "buttons": [
        1.0,
        1.0,
        1.0
      ],
      "background_tab": [
        -1.0,
        0.5,
        0.75
      ],
      "frame_inactive": [
        -1.0,
        0.3,
        0.6
      ],
      "frame_incognito": [
        -1.0,
        0.2,
        0.35
      ],
      "frame_incognito_inactive": [
        -1.0,
        0.3,
        0.6
      ]
    },
    "colors": {
      "frame": [
        6,
        6,
        6
      ],
      "toolbar": [
        6,
        6,
        6
      ],
      "ntp_link": [
        33,
        33,
        33
      ],
      "ntp_text": [
        255,
        255,
        255
      ],
      "tab_text": [
        255,
        255,
        255
      ],
      "ntp_header": [
        0,
        0,
        0
      ],
      "ntp_section": [
        74,
        74,
        74
      ],
      "bookmark_text": [
        150,
        214,
        89
      ],
      "frame_inactive": [
        71,
        71,
        71
      ],
      "ntp_background": [
        1,
        0,
        0
      ],
      "frame_incognito": [
        0,
        0,
        0
      ],
      "ntp_section_link": [
        33,
        33,
        33
      ],
      "ntp_section_text": [
        45,
        45,
        45
      ],
      "button_background": [
        6,
        6,
        6
      ],
      "control_background": [
        211,
        211,
        211
      ],
      "ntp_link_underline": [
        45,
        45,
        45
      ],
      "tab_background_text": [
        127,
        240,
        254
      ],
      "frame_incognito_inactive": [
        71,
        71,
        71
      ],
      "ntp_section_link_underline": [
        74,
        74,
        74
      ]
    },
    "images": {
      "theme_frame": "images/theme_frame.png",
      "theme_toolbar": "images/theme_toolbar.png",
      "theme_ntp_background": "images/theme_ntp_background.png",
      "theme_tab_background": "images/theme_tab_background.png",
      "theme_button_background": "images/theme_button_background.png"
    },
    "properties": {
      "ntp_logo_alternate": 2,
      "ntp_background_repeat": "repeat-x",
      "ntp_background_alignment": "fit"
    }
  },
  "version": "1.0",
  "short_name": "Christmas Lights",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "default_locale": "en",
  "manifest_version": 2
}

by ✦ Astarte

Christmas Lights

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Embedded URLs (1 total):

Raw Manifest

Detections

Manifest Findings