Extension Details
Context-Aware Verdict
The extension has extremely limited trust indicators with only 213 users and a modest 3.7-star rating from just 3 reviews. The minimal user base and lack of established reputation raise significant concerns. The developer information is sparse, providing only a GitHub Pages URL without clear company credentials or contact details. The extension's purpose is unclear from the provided description, making it difficult to assess legitimate functionality.
The permission set is extraordinarily broad and dangerous for an extension with unclear functionality. The combination of webRequest and webRequestBlocking permissions with all_urls access creates a perfect storm for malicious activity. This setup allows the extension to intercept, modify, and block all web traffic across every website you visit. The activeTab and storage permissions, while individually moderate risk, compound the threat when combined with the network interception capabilities. The use of outdated Manifest V2 indicates the extension hasn't been updated to meet modern security standards.
Do not install this extension under any circumstances given the critical risk level and unclear purpose. If you must evaluate it for research purposes, use a completely isolated Chrome profile with no personal data or accounts. Consider reporting this extension to Chrome Web Store for review due to the dangerous permission combination relative to its unclear functionality. Look for alternative extensions with clearer purposes, better ratings, larger user bases, and more restrictive permissions that align with their stated functionality.
Security Analysis
Security Analysis Details
Required Permissions:
- activeTab
- storage
- webRequest
- webRequestBlocking
- *://*/*
- <all_urls>
Embedded URLs (45 total):
| https://fonts.googleapis.com/css?family=Open+Sans | https://www.accuweather.com | |
| https://nypost.com | https://myadprice.github.io/#terms | |
| http://www.w3.org/2000/svg | http://www.w3.org/1999/xlink | |
| https://stackoverflow.com/a/47534399 | https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css | |
| https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js | https://code.jquery.com/jquery-3.4.0.min.js | |
| https://cdn.jsdelivr.net/npm/chart.js@2.8.0/dist/Chart.min.js | https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js | |
| https://img.shields.io/badge/License-GPLv3-blue.svg | https://github.com/waqaraqeel/myadprice/blob/master/LICENSE.txt | |
| https://myadprice.github.io/static/images/icon.png | https://github.com/prebid/Prebid.js/ | |
| https://bit.ly/myadprice-ch | https://bit.ly/myadprice-fx | |
| https://www.accueather.com | https://raw.githubusercontent.com/waqaraqeel/myadprice/master/img/screenshot.png | |
| http://cspeed.net | https://adexchanger.com/publishers/the-rise-of-header-bidding-and-the-end-of-the-publisher-waterfall/ | |
| https://adzerk.com/hbix/ | https://clients2.google.com/service/update2/crx | |
| https://fsf.org/ | https://www.gnu.org/licenses/ | |
| https://www.gnu.org/licenses/why-not-lgpl.html | http://www.gnu.org/licenses/ | |
| https://github.com/gorhill/uBlock | https://myadprice.cs.duke.edu/ | |
| https://stackoverflow.com/a/18234317 | https://getbootstrap.com | |
| https://github.com/twbs/bootstrap/blob/master/LICENSE | http://chartjs.org/ | |
| https://github.com/chartjs/Chart.js/blob/master/LICENSE.md | http://momentjs.com/guides/#/warnings/define-locale/ | |
| http://momentjs.com/guides/#/warnings/js-date/ | http://momentjs.com/guides/#/warnings/min-max/ | |
| http://momentjs.com/guides/#/warnings/add-inverted-param/ | http://momentjs.com/guides/#/warnings/zone/ | |
| http://momentjs.com/guides/#/warnings/dst-shifted/ | https://momentjs.com | |
| https://github.com/twbs/bootstrap/graphs/contributors | https://popper.js.org | |
| http://opensource.org/licenses/MIT |
Raw Manifest
{ "name": "MyAdPrice", "icons": { "16": "img/icon16.png", "48": "img/icon48.png", "128": "img/icon128.png" }, "version": "1.2.1", "background": { "scripts": [ "lib/jquery-3.3.1.min.js", "js/bidderURLs.js", "js/dfp_parser.js", "js/background.js" ] }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "MyAdPrice will tell you how much advertisers are willing to pay to show you their ads.", "permissions": [ "activeTab", "storage", "webRequest", "webRequestBlocking", "*://*/*", "<all_urls>" ], "browser_action": { "default_icon": "img/icon.png", "default_popup": "popup.html" }, "content_scripts": [ { "js": [ "js/bidderURLs.js", "js/content.js" ], "matches": [ "http://*/*", "https://*/*" ] } ], "manifest_version": 2 }