[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Paramount Plus Watch Party

Version 1.0.0 View in Chrome Web Store

Last scanned: about 9 hours ago

Extension Details

Rating: 1.0 ★ (1 rating)

Users: 404

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 2 total findings, including 1 high-risk finding.

Findings

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

tabs
storage

Embedded URLs (18 total):

https://reactjs.org/docs/error-decoder.html?invariant=	http://www.w3.org/1999/xlink
http://www.w3.org/XML/1998/namespace	http://www.w3.org/1999/xhtml
http://www.w3.org/1998/Math/MathML	http://www.w3.org/2000/svg
https://reactjs.org/link/react-polyfills	https://socket.io/docs/v3/migrating-from-2-x-to-3-0/
https://redirect.paramountparty.co/	https://redirect.paramountparty.co
https://redirect.paramountparty.co/getRoomData/	https://clients2.google.com/service/update2/crx
https://www.paramountplus.com/	https://redirect.paramountparty.co/createRoom
https://peerjs.com	https://github.com/peers/peerjs/issues
https://github.com/peers/peerjs	https://opencollective.com/peer

Raw Manifest

{
  "name": "Paramount Plus Watch Party",
  "icons": {
    "16": "paramount16x16.png",
    "48": "paramount48x48.png",
    "128": "paramount128x128.png"
  },
  "action": {
    "default_icon": "paramount16x16.png",
    "default_popup": "popup.html",
    "default_title": "Paramount Plus Watch Party"
  },
  "version": "1.0.0",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Watch Paramount videos in sync with friends and family",
  "permissions": [
    "tabs",
    "storage"
  ],
  "options_page": "options.html",
  "content_scripts": [
    {
      "js": [
        "contentScript.js"
      ],
      "matches": [
        "https://redirect.paramountparty.co/*"
      ]
    },
    {
      "js": [
        "Sonyliv.js"
      ],
      "matches": [
        "https://www.paramountplus.com/*"
      ]
    }
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "https://*/*"
      ],
      "resources": [
        "netflix.js",
        "avatar1.svg",
        "avatar2.svg",
        "avatar3.svg",
        "avatar4.svg",
        "paramount128x128.png"
      ]
    }
  ]
}

by ✦ Astarte