CRX aminer
Extension icon

Gloom Dark Mode

Version 1.0.5 View in Chrome Web Store

Last scanned: about 4 hours ago

Extension Details

Rating: 4.3 ★ (45 ratings)
Users: 10,000

Context-Aware Verdict

MEDIUM
Overall Risk
Trust Factors:

The extension has a moderate user base of 10,000 users with a decent rating of 4.3/5 from 45 reviews, suggesting reasonable user satisfaction. However, the lack of clear developer information raises some transparency concerns. The extension appears to serve a legitimate purpose as a dark mode tool, which is a common and useful browser enhancement.

Concerns:

The primary concern is the overly broad host permissions (<all_urls>) which grants access to all websites. While dark mode extensions typically need wide access to apply themes across sites, this level of permission creates potential for data collection or malicious activity. The combination of scripting permissions with universal site access amplifies this risk. The storage permission, while necessary for saving user preferences, could potentially be misused to store sensitive data. The contextMenus permission seems appropriate for a theming extension but adds another attack vector.

Recommendations:

Consider running this extension in a separate Chrome profile to isolate it from sensitive browsing activities. Monitor the extension's behavior and disable it on sensitive websites like banking or work-related sites. Regularly review what data the extension might be storing through Chrome's extension management settings. If possible, look for alternative dark mode extensions with more limited permissions or use Chrome's built-in dark mode features where available. Keep the extension updated and watch for any unusual permission requests in future updates.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
MEDIUM
Medium-Risk Permission: contextMenus
This extension has the contextMenus permission. Can add items to the context menu.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.