CRX aminer
Extension icon

Olakai

Version 2.5.0 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Rating: 5.0 ★ (2 ratings)
Users: 22

Context-Aware Verdict

CRITICAL
Overall Risk
Trust Factors:

The extension has extremely limited trust indicators with only 22 users and just 2 ratings, suggesting minimal real-world validation. The lack of developer information, company details, and missing description raises significant transparency concerns. The perfect 5.0 rating from only 2 reviews is insufficient to establish credibility.

Concerns:

The extension requests an excessive combination of high-risk permissions that appear disproportionate to any legitimate functionality. The identity and identity.email permissions combined with broad host access create a perfect storm for data harvesting. The ability to inject content scripts across all websites while accessing cookies, tabs, and user identity information suggests potential surveillance capabilities. The broad permissions package resembles malware patterns more than typical productivity extensions.

The minimal user base combined with maximum permissions is a classic red flag indicating either poor development practices or potentially malicious intent. The lack of transparency about the developer and extension purpose makes risk assessment impossible through normal channels.

Recommendations:

Do not install this extension under any circumstances. The risk-to-benefit ratio is unacceptable given the unknown functionality and excessive permissions. If you must evaluate similar functionality, seek well-established alternatives from verified developers with transparent privacy policies and substantial user bases. Report this extension to Chrome Web Store for review due to suspicious permission patterns.

Findings

HIGH
Broad Content Script Injection
This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: cookies
This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: identity
This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.