[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Edit with Notepad++

Version 0.2.2 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Rating: 3.5 ★ (24 ratings)

Users: 20,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension has a moderate user base of 20,000 users and a decent 3.5-star rating from 24 reviews, suggesting basic functionality works as intended. The concept of editing text with Notepad++ is legitimate and useful for developers and power users. However, the lack of developer information and missing last updated date raises some transparency concerns.

Concerns: The most significant concern is the nativeMessaging permission, which allows the extension to communicate with native applications on your computer - this is necessary for Notepad++ integration but creates a potential attack vector. The combination of activeTab and scripting permissions means the extension can access and modify content on any webpage you're viewing when activated. While the storage permission is standard, it could potentially be used to collect browsing data. The missing developer information makes it difficult to verify the publisher's credibility.

Recommendations: This extension requires careful consideration due to its native messaging capability. If you frequently need to edit web content in Notepad++, consider running this extension in a separate Chrome profile to isolate potential risks. Verify that Notepad++ is properly installed and configured before use. Monitor the extension's behavior and disable it when not actively needed. Consider alternative text editing solutions that don't require native messaging if the functionality isn't essential to your workflow.

Findings

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: notifications

This extension has the notifications permission. Can show notifications.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Raw Manifest

{
  "name": "Edit with Notepad++",
  "icons": {
    "16": "/data/icons/16.png",
    "32": "/data/icons/32.png",
    "48": "/data/icons/48.png",
    "64": "/data/icons/64.png",
    "128": "/data/icons/128.png",
    "256": "/data/icons/256.png"
  },
  "action": {},
  "version": "0.2.2",
  "commands": {
    "_execute_action": {}
  },
  "background": {
    "service_worker": "worker.js"
  },
  "options_ui": {
    "page": "/data/options/index.html"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Edit content of text area elements, or inner and outer HTML of node elements in Notepad++ text editor with real-time updates",
  "permissions": [
    "storage",
    "activeTab",
    "scripting",
    "nativeMessaging",
    "notifications",
    "contextMenus"
  ],
  "homepage_url": "https://webextension.org/listing/edit-as-html.html?from=notepad",
  "offline_enabled": true,
  "manifest_version": 3,
  "optional_permissions": [
    "downloads"
  ],
  "web_accessible_resources": [
    {
      "matches": [
        "*://*/*"
      ],
      "resources": [
        "/data/editor/core.html"
      ]
    }
  ],
  "optional_host_permissions": [
    "*://*/*"
  ]
}

by ✦ Astarte

https://clients2.google.com/service/update2/crx	https://webextension.org/listing/edit-as-html.html?from=notepad
https://github.com/belaviyo/native-client/releases	https://github.com/belaviyo/native-client
https://www.chromium.org/for-testers/enable-logging	https://www.youtube.com/watch?v=xX-j-HQ8WJI
https://www.youtube.com/watch?v=8r756Z3wQ8M	https://api.github.com/repos/belaviyo/native-client/releases/latest
http://jakiestfu.com/	http://opensource.org/licenses/MIT
http://github.com/jakiestfu/Behave.js/

Edit with Notepad++

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Embedded URLs (11 total):

Raw Manifest

Detections

Manifest Findings