[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Baseball

Version 1.0 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Developer: Google

Rating: 4.6 ★ (605 ratings)

Context-Aware Verdict

LOW

Overall Risk

Trust Factors:

The extension is authored by Google, which provides significant credibility and trust. With a strong 4.6-star rating from 605 users, it demonstrates positive user experience and reliability. Google's reputation as a major technology company with established security practices adds substantial confidence to this extension's legitimacy.

Concerns:

The primary concern is the use of an older Manifest Version, which lacks the enhanced security restrictions found in Manifest V3. This older framework may have fewer built-in protections against malicious behavior. However, the incomplete technical details provided make it difficult to assess specific permission usage or potential overreach. The minimal description "Baseball" doesn't clearly indicate the extension's functionality, which could be concerning if users don't understand what they're installing.

Recommendations:

Given Google's authorship and the positive user feedback, this extension appears relatively safe for general use. However, users should verify the extension's actual purpose before installation since the description is vague. While the older manifest version is a consideration, Google's security practices likely mitigate most risks. Users who are particularly security-conscious might wait for a potential Manifest V3 update, but the overall risk remains low due to the trusted developer. Regular monitoring of extension updates would be prudent to ensure continued security maintenance.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version , which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "name": "__MSG_themeName__",
  "theme": {
    "tints": {
      "buttons": [
        0.36,
        0.472,
        0.5
      ]
    },
    "colors": {
      "frame": [
        41,
        96,
        12
      ],
      "toolbar": [
        153,
        97,
        66
      ],
      "ntp_link": [
        255,
        255,
        255
      ],
      "ntp_text": [
        255,
        255,
        255
      ],
      "tab_text": [
        255,
        255,
        255
      ],
      "ntp_section": [
        0,
        0,
        0,
        0.5
      ],
      "bookmark_text": [
        255,
        255,
        255
      ],
      "ntp_background": [
        41,
        96,
        12
      ],
      "ntp_section_link": [
        255,
        255,
        255
      ],
      "ntp_section_text": [
        255,
        255,
        255
      ],
      "tab_background_text": [
        255,
        255,
        255
      ]
    },
    "images": {
      "theme_frame": "i/agxjaHJvbWV0aGVtZXNyDAsSBEZpbGUYpqQBDA",
      "theme_toolbar": "i/agxjaHJvbWV0aGVtZXNyDAsSBEZpbGUYp6QBDA",
      "theme_ntp_background": "i/agxjaHJvbWV0aGVtZXNyDAsSBEZpbGUYxZwBDA",
      "theme_tab_background": "i/agxjaHJvbWV0aGVtZXNyDAsSBEZpbGUY6uoBDA",
      "theme_window_control_background": "i/agxjaHJvbWV0aGVtZXNyDAsSBEZpbGUYiqwBDA"
    },
    "properties": {
      "ntp_logo_alternate": 1,
      "ntp_background_repeat": "repeat-x",
      "ntp_background_alignment": "top left"
    }
  },
  "version": "1.0",
  "update_url": "http://clients2.google.com/service/update2/crx",
  "default_locale": "en"
}

by ✦ Astarte

Baseball

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Embedded URLs (1 total):

Raw Manifest

Detections

Manifest Findings