Extension Details
Context-Aware Verdict
The extension has very limited trust indicators with only 1,000 users and just 4 ratings, despite a perfect 5.0 rating. The lack of developer information, company details, and last updated date raises transparency concerns. The name "Sybrin WebAssist" suggests it may be from Sybrin, a known identity verification company, but this cannot be confirmed without proper developer attribution.
The extension requests extremely broad permissions that are concerning for its apparent purpose. The combination of tabs permission with content script injection across all URLs creates a powerful surveillance capability. The nativeMessaging permission allows communication with local applications, which could facilitate data exfiltration. The broad host permissions (http://*/ and https://*//) combined with content script injection on all URLs means this extension can read and modify any website you visit, including banking sites, email, and other sensitive platforms. The use of outdated Manifest V2 provides fewer security protections.
Given the high-risk profile, avoid installing this extension unless absolutely necessary for business purposes. If required, run it in a completely separate Chrome profile isolated from personal browsing. Verify the extension's legitimacy by contacting Sybrin directly through official channels. Consider alternative solutions that require fewer permissions. Monitor your accounts for unusual activity if you must use this extension.
Findings
Security Analysis Details
Required Permissions:
- tabs
- activeTab
- nativeMessaging
- contextMenus
- http://*/
- https://*/
Embedded URLs (4 total):
| http://127.0.0.1:20401/api/app/shutdown | http://127.0.0.1:20401/default.html | |
| http://127.0.0.1:20401/api/app/isrunning | https://clients2.google.com/service/update2/crx |
Raw Manifest
{ "name": "Sybrin WebAssist", "icons": { "16": "icon16.png", "24": "icon24.png", "32": "icon32.png", "48": "icon48.png", "64": "icon64.png", "256": "icon256.png" }, "author": "Sybrin Limited", "version": "1.0.0.7", "background": { "scripts": [ "jquery-3.1.1.min.js", "background.js" ] }, "short_name": "Sybrin WebAssist", "update_url": "https://clients2.google.com/service/update2/crx", "description": "Launches and manages Sybrin WebAssist service.", "permissions": [ "tabs", "activeTab", "nativeMessaging", "contextMenus", "http://*/", "https://*/" ], "browser_action": { "default_icon": "icon32.png" }, "content_scripts": [ { "js": [ "content.js" ], "matches": [ "<all_urls>" ], "all_frames": true } ], "manifest_version": 2 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.