[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Super Clipboard Manager

Version 2.0.0 View in Chrome Web Store

Last scanned: about 21 hours ago

Extension Details

Developer: mozared.com

Rating: 4.6 ★ (9 ratings)

Users: 1,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors: The extension has a decent rating of 4.6/5 but with only 9 reviews, which is insufficient for reliable assessment. With just 1,000 users, it lacks the widespread adoption that typically indicates trustworthiness. The developer "mozared.com" appears to be a smaller entity without established reputation in the extension ecosystem.

Concerns: The permission set is extremely broad for a clipboard manager. While clipboardRead and clipboardWrite are expected, the downloads permission is highly suspicious and unnecessary for basic clipboard functionality. The content scripts running on all HTTP/HTTPS/file URLs creates extensive access to web pages. The combination of clipboard access with downloads capability could enable data exfiltration - copying sensitive information and automatically downloading it. The storage permission, while reasonable, combined with other permissions could facilitate persistent data collection.

Recommendations: This extension poses significant privacy and security risks. Consider running it in a completely separate Chrome profile to isolate potential damage. Better yet, seek alternative clipboard managers from established developers with larger user bases and more transparent permission models. If you must use this extension, regularly monitor your downloads folder for unexpected files and avoid copying sensitive information like passwords or personal data while it's active. The risk-to-benefit ratio appears unfavorable given the availability of safer alternatives.

Findings

HIGH

High-Risk Permission: clipboardRead

This extension has the clipboardRead permission. Can read clipboard content. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: clipboardWrite

This extension has the clipboardWrite permission. Can modify clipboard content. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: downloads

This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Raw Manifest

{
  "name": "Super Clipboard Manager",
  "icons": {
    "16": "icon16.png",
    "48": "icon48.png",
    "128": "icon128.png"
  },
  "action": {
    "default_icon": {
      "16": "icon16.png",
      "48": "icon48.png",
      "128": "icon128.png"
    },
    "default_popup": "popup.html"
  },
  "author": {
    "email": "ali1905.1995@gmail.com"
  },
  "version": "2.0.0",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Experience a pro-level clipboard manager with pinned items URL logging bulk deletion batch export a for streamlining your workflow",
  "permissions": [
    "clipboardWrite",
    "clipboardRead",
    "storage",
    "downloads",
    "contextMenus",
    "activeTab"
  ],
  "content_scripts": [
    {
      "js": [
        "content.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*",
        "file://*/*"
      ]
    }
  ],
  "manifest_version": 3
}

by ✦ Astarte

https://example.com	https://example.org
http://www.apache.org/licenses/	http://www.apache.org/licenses/LICENSE-2.0
https://github.com/alisincar	https://linkedin.com/in/alisincar
https://mozared.com	http://www.w3.org/2000/svg
https://clients2.google.com/service/update2/crx

Super Clipboard Manager

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (9 total):

Raw Manifest

Detections

Manifest Findings