[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Котик и Пёс

Version 1.6 View in Chrome Web Store

Last scanned: about 14 hours ago

Extension Details

Developer: https://atavi.com/browser-themes/p/cat_and_dog/chrome-themes-top/

Rating: 4.7 ★ (160 ratings)

Users: 10,000

Context-Aware Verdict

LOW

Overall Risk

Trust Factors:

The extension has a solid user base of 10,000 users with a high rating of 4.7 stars from 160 reviews, indicating positive user experiences. The developer is associated with Atavi, a known browser themes provider, which adds some credibility. The extension appears to be a simple theme or visual customization tool based on its name "Котик и Пёс" (Cat and Dog in Russian) and the developer's focus on browser themes.

Concerns:

The primary concern is the use of Manifest Version 2, which lacks the enhanced security features of Manifest V3. While this is common for older extensions, it represents a moderate security consideration. The absence of detailed technical information about permissions, content scripts, and background scripts makes it difficult to fully assess potential privacy or security implications, though this could indicate a simple theme with minimal functionality.

Recommendations:

This extension appears to be relatively safe for general use given its theme-focused nature and positive user feedback. However, users concerned about security should monitor for updates that migrate to Manifest V3. Since it's likely a cosmetic enhancement with limited system access, the risk is manageable. Users with high security requirements might consider running it in a separate Chrome profile as a precautionary measure, though this may be unnecessary given the low overall risk assessment.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "app": {
    "urls": [
      "http://atavi.com/browser-themes/"
    ],
    "launch": {
      "web_url": "http://atavi.com/browser-themes/?from=chrome-themes&tid=cat_and_dog"
    }
  },
  "link": "http://atavi.com/browser-themes/",
  "name": "__MSG_appName__",
  "theme": {
    "colors": {
      "frame": [
        230,
        230,
        230
      ],
      "toolbar": [
        228,
        228,
        228,
        0.6
      ],
      "ntp_link": [
        0,
        0,
        0
      ],
      "ntp_text": [
        0,
        0,
        0
      ],
      "tab_text": [
        0,
        0,
        0
      ],
      "bookmark_text": [
        0,
        0,
        0
      ],
      "ntp_background": [
        255,
        255,
        255
      ],
      "ntp_link_underline": [
        0,
        0,
        0
      ],
      "tab_background_text": [
        0,
        0,
        0
      ]
    },
    "images": {
      "theme_frame": "images/theme_frame.png",
      "theme_toolbar": "images/theme_toolbar.png",
      "theme_ntp_background": "images/theme_ntp_background.png",
      "theme_tab_background": "images/theme_tab_background.png"
    },
    "properties": {
      "ntp_background_repeat": "no-repeat",
      "ntp_background_alignment": "middle"
    }
  },
  "version": "1.6",
  "short_name": "Awesome theme for Atavi.com",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "default_locale": "ru",
  "manifest_version": 2
}

by ✦ Astarte

Котик и Пёс

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Embedded URLs (3 total):

Raw Manifest

Detections

Manifest Findings

https://clients2.google.com/service/update2/crx	http://atavi.com/browser-themes/
http://atavi.com/browser-themes/?from=chrome-themes&tid=cat_and_dog