Extension Details
Context-Aware Verdict
The extension has a solid 4.7-star rating from 33 reviews and is developed by Moonstop Software Ltd, which suggests some level of legitimacy. However, with only 1,000 users, it has a relatively small user base that limits the ability to assess its reputation through widespread adoption. The lack of a clear description makes it difficult to understand the extension's intended purpose and functionality.
The primary concern is the broad host permissions for Wikipedia domains, which seems excessive without understanding what the extension actually does. The combination of scripting permissions with declarativeNetRequestWithHostAccess could potentially allow the extension to modify web requests and inject scripts on Wikipedia pages. The storage permission, while common, adds to the risk profile when combined with the other permissions. The missing description is particularly concerning as users cannot properly evaluate whether the requested permissions are justified for the extension's stated purpose.
Given the medium risk level and unclear functionality, consider running this extension in a separate Chrome profile to isolate potential security risks. Before installation, try to research the extension's actual purpose through user reviews or the developer's website. Monitor the extension's behavior on Wikipedia pages and be cautious about any unexpected modifications to page content or functionality. Consider whether you actually need this extension's functionality, especially given the broad permissions it requests.
Findings
Security Analysis Details
Required Permissions:
- storage
- scripting
- activeTab
- declarativeNetRequestWithHostAccess
Optional Permissions:
- bookmarks
Host Permissions:
- https://*.wikipedia.org/*
Embedded URLs (20 total):
| https://clients2.google.com/service/update2/crx | http://127.0.0.1/ | |
| http://127.0.0.1: | https://hoverflow.io/ | |
| https://hoverflow.io/upgrade | https://web.dev/sandboxed-iframes | |
| https://twitter.com/hoverflowio | https://www.twitch.tv | |
| https://www.youtube.com | http://www.w3.org/2000/svg | |
| https://fontawesome.com | https://fontawesome.com/license/free | |
| https://fontawesome.com/license | https://forms.gle/QJgxoSU4VaN8m7Pr6 | |
| https://hoverflow.io/welcome | https://hoverflow.io/update | |
| https://activate-mbo72rwysq-ew.a.run.app | https://verify-mbo72rwysq-ew.a.run.app | |
| https://hoverflow.io | https://billing.stripe.com/p/login/7sIbLU5G1aPjbuw144 |
Raw Manifest
{ "name": "__MSG_appName__", "icons": { "16": "/icons/16.png", "32": "/icons/32.png", "48": "/icons/48.png", "128": "/icons/128.png" }, "action": { "default_icon": { "16": "/icons/grey/16.png", "32": "/icons/grey/32.png", "48": "/icons/grey/48.png", "128": "/icons/grey/128.png" }, "default_title": "__MSG_actionTitle__" }, "version": "1.2.5", "background": { "service_worker": "src/serviceWorker.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_appDesc__", "permissions": [ "storage", "scripting", "activeTab", "declarativeNetRequestWithHostAccess" ], "options_page": "settings.html", "default_locale": "en", "host_permissions": [ "https://*.wikipedia.org/*" ], "manifest_version": 3, "optional_permissions": [ "bookmarks" ], "externally_connectable": { "matches": [ "https://hoverflow.io/*" ] }, "declarative_net_request": { "rule_resources": [ { "id": "frameRules", "path": "rules.json", "enabled": true } ] }, "optional_host_permissions": [ "https://*/*", "http://localhost/*", "http://localhost:*/*", "http://127.0.0.1/*", "http://127.0.0.1:*/*" ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.