CRX aminer
Extension icon

Deluminate

Version 1.1.0 View in Chrome Web Store

Last scanned: about 11 hours ago

Extension Details

Rating: 4.3 ★ (1K ratings)
Users: 30,000

Context-Aware Verdict

HIGH
Overall Risk
Trust Factors:

The extension has a solid user base of 30,000 users and maintains a good rating of 4.3/5 from 1,000 reviews, suggesting legitimate functionality and user satisfaction. However, the lack of visible developer information and company details reduces transparency and accountability.

Concerns:

The extension's permission set is concerning given the missing description. The combination of tabs permission, scripting capabilities, and broad host permissions (<all_urls>) creates a powerful access profile that could be misused. Without knowing the extension's intended purpose, it's difficult to justify why it needs access to all websites and tab manipulation capabilities. The offscreen permission adds another layer of potential background activity that users cannot directly observe.

The most significant red flag is the broad host permissions combined with scripting access, which theoretically allows the extension to inject code into any website you visit. This creates substantial potential for data harvesting, credential theft, or malicious script injection.

Recommendations:

Consider running this extension in a separate Chrome profile to isolate potential risks from your main browsing activities. Before installation, research the extension's actual functionality to determine if the extensive permissions are justified. Monitor your browsing behavior for any unusual activity if you choose to keep it installed. Consider seeking alternative extensions with more limited permissions if similar functionality is available elsewhere.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.