[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Lix - B2B Email Finder

Version 1.85.4 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Developer: https://lix-it.com/

Rating: 4.4 ★

Users: 448

Context-Aware Verdict

HIGH

Overall Risk

Based on 7 total findings, including 2 high-risk findings.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: cookies

This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: https://*.linkedin.com/*, http://*.linkedin.com/*. Ensure you trust this extension with access to these sites.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: notifications

This extension has the notifications permission. Can show notifications.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

activeTab
scripting
cookies
alarms
storage
notifications
contextMenus

Host Permissions:

https://*.lix.localhost/*
https://*.linkedin.com/*
http://*.linkedin.com/*
http://*.licdn.com/*
https://*.licdn.com/*
https://*.lix-it.com/*
https://*.mixpanel.com/*

Embedded URLs (233 total):

http://jedwatson.github.io/classnames	https://github.com/js-cookie/js-cookie
https://sizzlejs.com/	https://js.foundation/
https://jquery.com/	https://jquery.org/license
https://github.com/facebook/regenerator/blob/main/LICENSE	https://github.com/cssinjs/jss
https://github.com/facebook/react/blob/b5ac963fb791d1298e7f396236383bc955f916c1/src/isomorphic/classic/element/ReactElement.js#L21-L25	https://github.com/sindresorhus/auto-bind
https://floating-ui.com/docs/detectOverflow	https://floating-ui.com/docs/arrow
https://floating-ui.com/docs/flip	https://floating-ui.com/docs/shift
https://developer.mozilla.org/en-US/docs/Web/CSS/Containing_block#identifying_the_containing_block	https://floating-ui.com/docs/autoUpdate
http://www.w3.org/2000/svg	https://svelte.dev/docs#run-time-svelte-onmount
https://bitsofco.de/accessible-modal-dialog/	https://floating-ui.com/docs/virtual-elements
https://samthor.au/2021/observing-dom/	https://github.com/floating-ui/floating-ui/issues/1740
https://floating-ui.com/docs/offset	https://floating-ui.com/docs/autoPlacement
https://floating-ui.com/docs/size	https://floating-ui.com/docs/hide
https://floating-ui.com/docs/inline	https://github.com/floating-ui/floating-ui/issues/2549#issuecomment-1719601643
https://www.youtube.com/embed/2xTl_W_Fuvs?si=jVyGrJl2HTwuqdaB	https://github.com/babel/babel.git
https://babel.dev/docs/en/next/babel-runtime	https://babel.dev/team
https://github.com/getsentry/sentry-javascript/tree/master/packages/utils	https://sentry.io
https://github.com/getsentry/sentry-javascript/tree/master/packages/core	https://github.com/getsentry/sentry-javascript/tree/master/packages/browser
https://github.com/Microsoft/tslib.git	https://www.typescriptlang.org/
https://lukeed.com	https://github.com/segmentio/analytics-next
https://github.com/panva/jose	https://github.com/reactivex/rxjs.git
https://rxjs.dev	http://www.apache.org/licenses/
http://www.apache.org/licenses/LICENSE-2.0	https://github.com/redux-observable/redux-observable.git
https://github.com/redux-observable/redux-observable#README.md	https://github.com/immerjs/immer.git
https://github.com/immerjs/immer#readme	http://redux.js.org
https://github.com/reduxjs/redux-thunk	https://github.com/reduxjs/redux-toolkit.git
https://redux-toolkit.js.org	https://github.com/uuidjs/uuid.git
http://n8.io	https://github.com/STRML/keyMirror
https://github.com/filenwind/keymirror-nested.git	https://github.com/filenwind/keymirror-nested#readme
https://immutable-js.com	https://github.com/leebyron
https://github.com/moment/moment.git	https://momentjs.com
https://github.com/ichernev	http://timwoodcreates.com/
http://rockymeza.com	http://codeofmatt.com
http://isaaccambron.com	https://github.com/oire
https://github.com/bitinn/node-fetch.git	https://github.com/bitinn/node-fetch
https://reactjs.org/docs/error-decoder.html?invariant=	http://www.w3.org/1999/xlink
http://www.w3.org/XML/1998/namespace	http://www.w3.org/1999/xhtml
http://www.w3.org/1998/Math/MathML	https://reactjs.org/link/react-polyfills
https://lix-it.com	http://www.example.com
https://github.com/apollographql/invariant-packages	http://docs.apollostack.com/apollo-client/core.html#gql

Page 1 of 3

Raw Manifest

{
  "name": "Lix - B2B Email Finder",
  "icons": {
    "16": "assets/icons/extension-blue-16.png",
    "32": "assets/icons/extension-blue-32.png",
    "48": "assets/icons/extension-blue-128.png",
    "128": "assets/icons/extension-blue-128.png"
  },
  "action": {},
  "author": "Lix",
  "version": "1.85.4",
  "background": {
    "type": "module",
    "service_worker": "dist/main.js"
  },
  "short_name": "Lix",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "B2B email finder. Visit https://lix-it.com for instructions on use.",
  "permissions": [
    "activeTab",
    "scripting",
    "cookies",
    "alarms",
    "storage",
    "notifications",
    "contextMenus"
  ],
  "host_permissions": [
    "https://*.lix.localhost/*",
    "https://*.linkedin.com/*",
    "http://*.linkedin.com/*",
    "http://*.licdn.com/*",
    "https://*.licdn.com/*",
    "https://*.lix-it.com/*",
    "https://*.mixpanel.com/*"
  ],
  "manifest_version": 3,
  "externally_connectable": {
    "matches": [
      "https://*.lix-it.com/*",
      "*://*.lix.localhost/*",
      "https://*.linkedin.com/*"
    ]
  }
}

by ✦ Astarte

Lix - B2B Email Finder

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (233 total):

Raw Manifest

Detections

Manifest Findings