[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Auto Clicker - MT Auto Clicker [Beta Version]

Version 1.10 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Developer: https://www.autoclicker.org/

Rating: 2.3 ★ (117 ratings)

Users: 10,000

Context-Aware Verdict

CRITICAL

Overall Risk

Based on 8 total findings, including 4 high-risk findings.

Findings

HIGH

Broad Content Script Injection

This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.

HIGH

High-Risk Permission: clipboardWrite

This extension has the clipboardWrite permission. Can modify clipboard content. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: identity

This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

storage
activeTab
scripting
tabs
desktopCapture
unlimitedStorage
identity
clipboardWrite
contextMenus

Embedded URLs (282 total):

https://www.mtautoclicker.com/auto-clicker-guide/extension/	https://www.mtautoclicker.com/feedback-form/
https://accounts.google.com/o/oauth2/auth?client_id=	https://www.googleapis.com/oauth2/v2/userinfo
https://feross.org	http://jedwatson.github.io/classnames
https://www.mtautoclicker.com/pricing	http://www.w3.org/2000/svg
https://github.com/MrRio/jsPDF	http://www.yworks.com
https://github.com/HackbrettXXX	https://github.com/acspike
https://github.com/pablohess	https://github.com/fjenett
https://github.com/warrenweckesser	https://github.com/lifof
https://github.com/lsdriscoll	https://github.com/stefslon
https://github.com/jmorel	https://github.com/chris-rock
https://github.com/juanpgaviria	https://github.com/dollaruw
https://github.com/diegocr	https://github.com/Flamenco
https://github.com/Gavvers	http://www.phpied.com/rgb-color-parser-in-javascript/
http://www.myersdaily.org/joseph/javascript/md5.js	http://www.fpdf.org/en/script/script37.php
http://opensource.org/licenses/mit-license	https://www.cs.cmu.edu/~dst/Adobe/Gallery/anon21jul01-pdf-encryption.txt
https://github.com/foliojs/pdfkit/blob/master/lib/security.js	https://github.com/siefkenj/
https://github.com/gingerchris	https://github.com/ineedfat
https://github.com/eaparango	https://github.com/burnburnrocket
https://github.com/jamesbrobb	https://github.com/deanm/omggif
https://webpjs.appspot.com	http://www.w3.org/1999/02/22-rdf-syntax-ns#
http://jspdf.default.namespaceuri/	https://html2canvas.hertzen.com
https://hertzen.com	http://www.apache.org/licenses/LICENSE-2.0
http://www.w3.org/1998/Math/MathML	http://www.w3.org/1999/xhtml
https://flattr.com/thing/72791/StackBlur-a-fast-almost-Gaussian-Blur-Effect-for-CanvasJavascript	http://www.quasimondo.com/StackBlurForCanvas/StackBlurDemo.html
https://getbootstrap.com	https://github.com/twbs/bootstrap/blob/master/LICENSE
https://github.com/willowsystems	https://en.wikipedia.org/wiki/List_of_file_signatures
https://github.com/Rob--W/pdf.js/commit/c676ecb5a0f54677b9f3340c3ef2cf42225453bb	https://www.w3.org/TR/CSS21/syndata.html#value-def-identifier
https://www.w3.org/TR/css-fonts-3/#font-matching-algorithm	https://stackoverflow.com/a/10136041
https://developer.mozilla.org/en-US/docs/Web/API/CanvasRenderingContext2D/getLineDash#return_value	http://hansmuller-flex.blogspot.com/2011/10/more-about-approximating-circular-arcs.html
http://mgran.blogspot.com	https://rawgit.com/MrRio/jsPDF/master/docs/jspdf.js.html#line992
http://www.64lines.com/jpeg-width-height	http://www.w3.org/TR/PNG-Chunks.html
http://www.w3.org/TR/PNG-Filters.html	http://www.libpng.org/pub/png/book/chapter09.html
https://github.com/Pantura	https://github.com/mathiasbynens/unicode-8.0.0
http://unicode.org/reports/tr9/	http://eligrey.com
https://github.com/eligrey/FileSaver.js/blob/master/LICENSE.md	http://purl.eligrey.com/github/FileSaver.js
https://github.com/BiggA94	http://www.webmproject.org/license/software/
http://www.webmproject.org/license/additional/	https://tools.ietf.org/html/rfc1951
https://gist.github.com/101arrowz/253f31eb5abc3d9275ab943003ffecad	https://github.com/photopea/UZIP.js
https://reddit.com/r/photopea/comments/ikekht/uzipjs_questions/	https://github.com/pipwerks/PDFObject
http://pipwerks.mit-license.org/	https://github.com/umdjs/umd/blob/master/templates/returnExports.js

Page 1 of 4

Raw Manifest

{
  "name": "Auto Clicker - MT Auto Clicker [Beta Version]",
  "icons": {
    "16": "icon16.png",
    "48": "icon48.png",
    "128": "icon128.png"
  },
  "action": {
    "default_icon": {
      "16": "icon16.png",
      "48": "icon48.png",
      "128": "icon128.png"
    },
    "default_popup": "index.html"
  },
  "oauth2": {
    "scopes": [
      "openid",
      "email",
      "profile"
    ],
    "client_id": "797204000478-jaondgb16vdn6s03d0ouf65rb9neap7t.apps.googleusercontent.com"
  },
  "version": "1.10",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Auto Clicker - MT Auto Clicker [Beta Version] is your go-to tool for automating repetitive tasks on your system.",
  "permissions": [
    "storage",
    "activeTab",
    "scripting",
    "tabs",
    "desktopCapture",
    "unlimitedStorage",
    "identity",
    "clipboardWrite",
    "contextMenus"
  ],
  "options_page": "options.html",
  "content_scripts": [
    {
      "js": [
        "./libs/jsPDF/jspdf.umd.min.js",
        "libs/jquery-3.6.0.min.js",
        "libs/html2canvas.min.js",
        "content.js"
      ],
      "css": [
        "./style.css"
      ],
      "matches": [
        "<all_urls>"
      ]
    }
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "imagesWindow/preset.png",
        "imagesWindow/setting.png",
        "imagesWindow/play.png",
        "imagesWindow/pause.png",
        "imagesWindow/target.png",
        "imagesWindow/cross.png",
        "imagesWindow/timing.png",
        "imagesWindow/interval.png",
        "imagesWindow/whichTypeScreenshot.png",
        "imagesWindow/zoom.png",
        "imagesWindow/zoomIn.png",
        "imagesWindow/zoomOut.png",
        "imagesWindow/microphoneon.png",
        "imagesWindow/microphoneoff.png",
        "menulogo.png",
        "imagesWindow/autoScrollRefresh.png",
        "imagesWindow/logo.png",
        "imagesWindow/edit.png",
        "imagesWindow/delete.png",
        "editorCapture.html",
        "editorCapture.js",
        "editorArea.html",
        "editorArea.js",
        "imagesWindow/redo.png",
        "imagesWindow/undo.png",
        "imagesWindow/reset.png",
        "imagesWindow/pngDownload.png",
        "imagesWindow/pdfDownload.png",
        "imagesWindow/movable.png",
        "imagesWindow/textIcon.png",
        "imagesWindow/pen.png",
        "imagesWindow/rectangle.png",
        "imagesWindow/circle.png",
        "imagesWindow/line.png",
        "imagesWindow/arrow.png",
        "imagesWindow/close.png",
        "imagesWindow/2.png",
        "imagesWindow/4.png",
        "imagesWindow/6.png",
        "imagesWindow/8.png",
        "imagesWindow/10.png",
        "imagesWindow/12.png",
        "imagesWindow/14.png",
        "imagesWindow/16.png",
        "imagesWindow/loading.gif",
        "popup.html",
        "editProfile.html",
        "uploadCustomCursor.html",
        "imagesWindow/closeCustomC.png",
        "imagesWindow/addCustomC.png"
      ]
    }
  ]
}

by ✦ Astarte

Auto Clicker - MT Auto Clicker [Beta Version]

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (282 total):

Raw Manifest

Detections

Manifest Findings