[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Rabatta

Version 11.7.7 View in Chrome Web Store

Last scanned: 7 months ago | force re-scan

Extension Details

Developer: rabatta.app

Rating: 4.2 ★ (44 ratings)

Size: 2.02MiB

Last Updated: May 29, 2025

Users: 100,000

Developer Info: Rabatta ApSKridtsløjfen 6, sal 2th Aalborg 9000 DK

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors:

- The extension has a relatively high number of users (100,000), which could indicate some level of trust.

- However, the developer information is limited, and there is no clear indication of a reputable company behind the extension.

Concerns:

- The extension requests broad host permissions (*://*/*) and content script injection (*://*/*; https://*/search*), allowing it to access and modify any website. These permissions are unnecessary for the stated purpose of the extension and pose significant privacy and security risks.

- The "storage" permission allows the extension to store data locally, which could potentially be used to store sensitive information without the user's knowledge.

- The combination of broad permissions and the lack of clear information about the developer raises concerns about the extension's intentions and potential for misuse.

Recommendations:

- Exercise caution when installing this extension, as the broad permissions and lack of transparency about the developer's intentions raise significant privacy and security concerns.

- If you decide to use the extension, consider running it in a separate browser profile or a sandboxed environment to limit potential risks.

- Regularly review the extension's permissions and activity, and uninstall it if you notice any suspicious behavior or if the extension requests additional permissions beyond what is necessary for its stated purpose.

- Consider using alternative extensions from reputable developers that request only the necessary permissions for their intended functionality.

Findings

HIGH

Broad Content Script Injection

This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage
alarms
scripting

Host Permissions:

*://*/*

Embedded URLs (24 total):

https://rabatta.app/	http://www.w3.org/2000/svg
http://www.w3.org/1999/xlink	http://www.w3.org/XML/1998/namespace
http://fb.me/use-check-prop-types	https://reactjs.org/docs/error-decoder.html?invariant=
http://www.w3.org/1998/Math/MathML	http://www.w3.org/1999/xhtml
https://schema.org/Offer	http://schema.org/Offer
https://schema.org/Product	http://schema.org/Product
https://apps.apple.com/app/id1577071722?action=write-review	http://jedwatson.github.io/classnames
https://rabatta.app/getting-started	https://rabatta.app/da/getting-started
https://rabatta.app/de/getting-started	https://rabatta.app/sv/getting-started
https://rabatta.app/nl/getting-started	https://rabatta.app/no/getting-started
https://rabatta.app/fi/getting-started	https://clients2.google.com/service/update2/crx
http://www.apache.org/licenses/	http://www.apache.org/licenses/LICENSE-2.0

Raw Manifest

{
  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHo4nhmcPdSQy2FIaiiAlEttUcoP6d5ps4LacMKeezQHeeLmyxaNXsQhZLVoMZ6wVTfaOI4gDP16PUsyI/M+o9mXJb0LIdNvL9wf57DY3ouzfBsY9xwo1gFFdMCFcjpNGZ5jaw4Fudhj/Pp5/f3koxID+Tr+1YNCgkFmFpO/nz5B+EevgHChvmjCRJVit6PfvFjWKC4KKJXBAXjPLGEMcHmsgwVAicEM/Ri/HkvrCvG8COEjZ5ByffNPWamqamQIpCh5gBW+i8RLYkxNeGR4Mi2uS6CdXQzNkGVbuoKMjEEyG2hehmjF2pRS/lyeToxfzD3S+5gunThdiKhbfEnBuwIDAQAB",
  "name": "Rabatta",
  "icons": {
    "16": "icons/icon16.png",
    "48": "icons/icon48.png",
    "128": "icons/icon128.png"
  },
  "action": {
    "default_title": "Rabatta"
  },
  "version": "11.7.7",
  "background": {
    "service_worker": "background/background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "permissions": [
    "storage",
    "alarms",
    "scripting"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "content-scripts/main/content-script.js"
      ],
      "run_at": "document_idle",
      "matches": [
        "*://*/*"
      ],
      "all_frames": false,
      "match_about_blank": true
    },
    {
      "js": [
        "content-scripts/serp/serp.js"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://*/search*"
      ],
      "all_frames": false,
      "include_globs": [
        "*://www.google.??/",
        "*://www.google.???/*"
      ],
      "match_about_blank": true
    }
  ],
  "host_permissions": [
    "*://*/*"
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "fonts/*",
        "styles/*"
      ]
    }
  ]
}

by ✦ Astarte

Rabatta

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (24 total):

Raw Manifest

Detections

Manifest Findings