CRX aminer
Extension icon

Call_NvoRegClient

Version 1.1.0 View in Chrome Web Store

Last scanned: about 6 hours ago

Extension Details

Rating: 5.0 ★ (2 ratings)
Users: 51

Context-Aware Verdict

HIGH
Overall Risk
Trust Factors:

The extension has extremely limited adoption with only 51 users and just 2 ratings, making it difficult to assess reliability through community feedback. The perfect 5.0 rating is based on too few reviews to be meaningful. The lack of developer information and company details raises transparency concerns, as legitimate extensions typically provide clear authorship and contact information.

Concerns:

The extension's content script permissions are highly concerning, targeting specific IP addresses (192.168.1.64, 95.155.36.142) and government domains (ngo.gov.me, nvoprod.gov.me, nvotest.gov.me). This suggests it's designed to interact with Montenegro government systems, which could be legitimate but also presents significant security risks if misused. The nativeMessaging permission allows communication with local applications, creating potential attack vectors for system compromise. The combination of government domain access and native messaging capabilities in an extension with minimal oversight is particularly worrisome.

Recommendations:

Given the high-risk profile, only install this extension if you specifically need to interact with Montenegro government systems and can verify its legitimacy through official channels. Run it in a completely separate Chrome profile to isolate potential security risks. Contact the relevant government IT department to confirm this is an officially sanctioned extension before installation. Monitor system activity closely when using this extension.

Findings