[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Seerror

Version 1.1.0 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Rating: 4.4 ★

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a decent rating of 4.4 stars, which suggests users find it functional. However, several concerning factors diminish trust: the missing description leaves users unclear about the extension's purpose, there's no visible user count or last updated date, and no developer information is provided. The name "Seerror" doesn't clearly indicate what functionality it provides, making it difficult to assess whether the requested permissions are appropriate.

Concerns:

The primary concern is the broad host permissions for Discord domains (*.discord.com/* and discord.com/*), which grants extensive access to all Discord pages and user data. Without a clear description of the extension's purpose, it's impossible to determine if this level of access is justified. The lack of transparency regarding the developer and missing basic metadata raises additional red flags about the extension's legitimacy and maintenance status.

Recommendations:

Exercise caution before installing this extension due to the lack of transparency. If you decide to use it, consider running it in a separate Chrome profile to isolate potential risks from your main browsing session. Monitor the extension's behavior closely and be aware that it can access all your Discord activity, messages, and account information. Consider looking for alternative extensions with clearer descriptions and more transparent developers if similar functionality is available elsewhere.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

Security Analysis Details

Host Permissions:

https://*.discord.com/*
https://discord.com/*

Embedded URLs (22 total):

https://yourusername.github.io/seerror/privacy-policy.html	https://discord.com/api/v9
https://x.com/seerrorX	https://github.com/Seerror-Technologies
https://www.linkedin.com/company/seerror/?viewAsMember=true	https://www.instagram.com/seerror.tech/
https://www.facebook.com/profile.php?id=61585476781250&rdid=op7RAuKi3gQwjwzv&share_url=https%3A%2F%2Fwww.facebook.com%2Fshare%2F17rCUdCsLQ%2F#	https://discord.gg/8QUWsRHcEP
https://www.youtube.com/@seerrorYT	https://cdn.discordapp.com/avatars/
https://cdn.discordapp.com/embed/avatars/	https://cdn.discordapp.com/icons/
https://cdn.discordapp.com/embed/avatars/0.png	https://fonts.googleapis.com/css2?family=Fira+Code:wght@400
https://clients2.google.com/service/update2/crx	https://www.seerror.com/
https://discord.com/	https://fonts.googleapis.com
https://fonts.gstatic.com	https://github.com/YOUR_USERNAME/seerror
https://YOUR_USERNAME.github.io/seerror/privacy-policy.html	https://chrome.google.com/webstore/devconsole

Raw Manifest

{
  "name": "Seerror",
  "icons": {
    "16": "icons/icon-16.png",
    "48": "icons/icon-48.png",
    "128": "icons/icon-128.png"
  },
  "author": "Seerror",
  "version": "1.1.0",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Bulk delete your Discord messages. Delete DMs and server messages in text, voice & stage channels. Fast, simple, privacy-focused.",
  "permissions": [],
  "homepage_url": "https://www.seerror.com/",
  "content_scripts": [
    {
      "js": [
        "content.js"
      ],
      "css": [
        "styles.css"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://*.discord.com/*",
        "https://discord.com/*"
      ]
    }
  ],
  "host_permissions": [
    "https://*.discord.com/*",
    "https://discord.com/*"
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "https://*.discord.com/*",
        "https://discord.com/*"
      ],
      "resources": [
        "icons/*"
      ]
    }
  ]
}

by ✦ Astarte