K-ON!

Version 3 View in Chrome Web Store

Last scanned: 23 days ago | force re-scan

Extension Details

Rating: 4.8 ★ (2.4K ratings)

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a strong user rating of 4.8 stars from 2,400 reviews, indicating generally positive user experiences. The name "K-ON!" suggests it's likely related to the popular anime series, which could indicate it's a theme or fan-related extension. However, several key trust indicators are missing including author information, developer details, user count, and last update date, making it difficult to assess the developer's credibility and extension maintenance.

Concerns:

- Uses an older Manifest Version (appears to be V2) which has weaker security protections compared to the current Manifest V3 standard

- Missing critical metadata including developer information, user statistics, and update history raises transparency concerns

- Incomplete technical details make it impossible to assess what permissions the extension requests or what resources it accesses

- The lack of visible permissions listing prevents proper evaluation of whether the extension requests appropriate access levels

Recommendations:

Consider running this extension in a separate Chrome profile to isolate any potential security risks. Before installation, try to verify the developer's identity and check if there are more recent, Manifest V3 versions available. Monitor the extension's behavior after installation and consider alternatives that provide better transparency about their permissions and regular security updates. The missing technical details suggest caution is warranted despite the positive user ratings.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version , which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "name": "__MSG_themeName__",
  "theme": {
    "tints": {
      "buttons": [
        0.577,
        0.718,
        0.506
      ]
    },
    "colors": {
      "frame": [
        66,
        111,
        190
      ],
      "toolbar": [
        237,
        244,
        253
      ],
      "ntp_link": [
        0,
        0,
        0
      ],
      "ntp_text": [
        0,
        0,
        0
      ],
      "tab_text": [
        0,
        0,
        0
      ],
      "ntp_header": [
        35,
        70,
        145,
        1
      ],
      "ntp_section": [
        228,
        237,
        255,
        0.8
      ],
      "bookmark_text": [
        0,
        0,
        0
      ],
      "ntp_background": [
        255,
        255,
        255
      ],
      "ntp_section_link": [
        0,
        0,
        0
      ],
      "ntp_section_text": [
        0,
        0,
        0
      ],
      "tab_background_text": [
        0,
        0,
        0
      ]
    },
    "images": {
      "theme_frame": "i/agxjaHJvbWV0aGVtZXNyDAsSBEZpbGUYgKAFDA",
      "theme_frame_overlay": "i/agxjaHJvbWV0aGVtZXNyDAsSBEZpbGUY_p8FDA",
      "theme_ntp_background": "i/agxjaHJvbWV0aGVtZXNyDAsSBEZpbGUYj_QDDA",
      "theme_tab_background": "i/agxjaHJvbWV0aGVtZXNyDAsSBEZpbGUY-fACDA",
      "theme_ntp_attribution": "i/agxjaHJvbWV0aGVtZXNyDAsSBEZpbGUYo-wDDA"
    },
    "properties": {
      "ntp_logo_alternate": 0,
      "ntp_background_repeat": "no-repeat",
      "ntp_background_alignment": "bottom"
    }
  },
  "version": "3",
  "update_url": "http://clients2.google.com/service/update2/crx",
  "default_locale": "en"
}

by ✦ Astarte

K-ON!

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Embedded URLs (1 total):

Raw Manifest

Detections

Manifest Findings