[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

White Winter

Version 1.0 View in Chrome Web Store

Last scanned: about 4 hours ago

Extension Details

Rating: 4.5 ★ (17 ratings)

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a decent user rating of 4.5 stars from 17 reviews, which suggests basic user satisfaction. However, several trust indicators are missing or concerning - there's no author information, developer details, user count, or last update date provided. The lack of a description makes it impossible to understand the extension's intended purpose, which is a significant red flag for transparency.

Concerns:

The primary concern is the complete absence of a description, making it impossible to verify if the extension's actual functionality matches user expectations. The use of Manifest Version 2 presents security risks as it has weaker security controls compared to V3. The missing metadata (author, developer info, user count, last update) raises questions about the extension's legitimacy and maintenance status. The generic name "White Winter" provides no indication of functionality, which could be intentional obfuscation.

Recommendations:

Exercise caution before installing this extension due to the lack of transparency. Consider finding alternative extensions with clear descriptions and active developer information. If you must use this extension, install it in a separate Chrome profile to isolate potential risks. Monitor the extension's behavior closely after installation and remove it immediately if you notice any unexpected activity. Look for similar extensions from verified developers with comprehensive descriptions and regular updates.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "name": "White Winter",
  "theme": {
    "tints": {
      "frame": [
        -1.0,
        0.5,
        0.5
      ],
      "buttons": [
        1.0,
        1.0,
        1.0
      ],
      "background_tab": [
        -1.0,
        0.5,
        0.75
      ],
      "frame_inactive": [
        -1.0,
        0.3,
        0.6
      ],
      "frame_incognito": [
        -1.0,
        0.2,
        0.35
      ],
      "frame_incognito_inactive": [
        -1.0,
        0.3,
        0.6
      ]
    },
    "colors": {
      "frame": [
        0,
        0,
        0
      ],
      "toolbar": [
        0,
        0,
        0
      ],
      "ntp_link": [
        255,
        255,
        255
      ],
      "ntp_text": [
        255,
        255,
        255
      ],
      "tab_text": [
        255,
        255,
        255
      ],
      "ntp_header": [
        0,
        0,
        0
      ],
      "ntp_section": [
        74,
        74,
        74
      ],
      "bookmark_text": [
        232,
        232,
        232
      ],
      "frame_inactive": [
        71,
        71,
        71
      ],
      "ntp_background": [
        0,
        0,
        0
      ],
      "frame_incognito": [
        0,
        0,
        0
      ],
      "ntp_section_link": [
        6,
        55,
        116
      ],
      "ntp_section_text": [
        255,
        255,
        255
      ],
      "button_background": [
        0,
        0,
        0
      ],
      "control_background": [
        0,
        0,
        0
      ],
      "ntp_link_underline": [
        255,
        255,
        255
      ],
      "tab_background_text": [
        255,
        255,
        255
      ],
      "frame_incognito_inactive": [
        71,
        71,
        71
      ],
      "ntp_section_link_underline": [
        255,
        255,
        255
      ]
    },
    "images": {
      "theme_frame": "images/theme_frame.jpg",
      "theme_toolbar": "images/theme_toolbar.jpg",
      "theme_ntp_background": "images/theme_ntp_background.jpg",
      "theme_tab_background": "images/theme_tab_background.jpg",
      "theme_button_background": "images/theme_button_background.jpg"
    },
    "properties": {
      "ntp_logo_alternate": 0,
      "ntp_background_repeat": "repeat",
      "ntp_background_alignment": "center"
    }
  },
  "version": "1.0",
  "short_name": "White Winter",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Theme showing heavy snow covering the landscape as a blanket",
  "manifest_version": 2
}

by ✦ Astarte

White Winter

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Embedded URLs (1 total):

Raw Manifest

Detections

Manifest Findings