[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

SlopBuster

Version 1.0.2 View in Chrome Web Store

Last scanned: about 13 hours ago

Extension Details

Rating: 3.1 ★

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a concerning lack of transparency with missing critical information including author details, developer information, user count, and last update date. The rating of 3.1 suggests mixed user experiences. The name "SlopBuster" and targeting of Twitter/X platforms suggests it may be designed to filter or modify content on these social media sites.

Concerns:

- Missing developer identification and contact information raises accountability concerns

- Unknown user base and update history make it difficult to assess ongoing maintenance and security

- Content script injection on Twitter/X could potentially access and modify sensitive social media data

- Storage permission allows persistent data collection, though this is relatively standard

- The moderate rating suggests potential functionality or reliability issues

- Lack of transparency about what data is stored or how the extension operates

Recommendations:

Given the missing developer information and moderate user rating, consider running this extension in a separate Chrome profile to isolate potential risks. Before installation, try to research the extension further through alternative sources or user reviews to understand its actual functionality. Monitor your Twitter/X activity after installation for any unexpected behavior. Consider whether the extension's benefits justify the privacy trade-offs, especially given the lack of transparency about data handling practices.

Findings

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Raw Manifest

{
  "name": "SlopBuster",
  "icons": {
    "16": "icons/icon_16px.png",
    "32": "icons/icon_32px.png",
    "48": "icons/icon_48px.png",
    "128": "icons/icon_128px.png"
  },
  "action": {
    "default_icon": {
      "16": "icons/icon_16px.png",
      "32": "icons/icon_32px.png",
      "48": "icons/icon_48px.png",
      "128": "icons/icon_128px.png"
    },
    "default_popup": "popup.html",
    "default_title": "SlopBuster"
  },
  "version": "1.0.2",
  "short_name": "SlopBuster",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Hide videos on X (Twitter) timelines. GIFs stay visible.",
  "permissions": [
    "storage"
  ],
  "homepage_url": "https://slopbuster.app",
  "content_scripts": [
    {
      "js": [
        "assets/content.2aa2c3445f.js"
      ],
      "css": [
        "assets/styles.88d52612a3.css"
      ],
      "run_at": "document_end",
      "matches": [
        "https://twitter.com/*",
        "https://x.com/*"
      ]
    }
  ],
  "manifest_version": 3
}

by ✦ Astarte

SlopBuster

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (6 total):

Raw Manifest

Detections

Manifest Findings

https://x.com	https://twitter.com
https://clients2.google.com/service/update2/crx	https://slopbuster.app
https://twitter.com/	https://x.com/