[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Eclipse Ad Blocker

Version 2.0.1 View in Chrome Web Store

Last scanned: about 10 hours ago

Extension Details

Developer: eclipseadblocker.com

Rating: 4.5 ★ (20 ratings)

Users: 40,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors: The extension has a moderate user base of 40,000 users and a decent 4.5-star rating, though based on only 20 reviews which is quite low for the user count. The developer domain "eclipseadblocker.com" appears to be purpose-built for this extension, but lacks established company reputation or transparency about the development team.

Concerns: The permission set is extremely broad for an ad blocker. While declarativeNetRequest is appropriate for blocking ads, the combination of webNavigation tracking, unlimited storage, and broad host permissions creates significant privacy risks. The ability to inject scripts into all websites goes beyond typical ad blocking needs and could enable data harvesting. The webNavigation permission allows comprehensive browsing behavior tracking, which is concerning for a privacy-focused tool like an ad blocker.

The low review count relative to user base suggests either recent rapid growth or potential artificial inflation of download numbers. The broad content script injection capability means this extension could read passwords, personal information, or financial data on any website you visit.

Recommendations: Consider using established ad blockers like uBlock Origin instead. If you choose to use this extension, run it in a separate Chrome profile isolated from sensitive browsing activities. Monitor your browsing performance and data usage for unusual activity. Regularly review what data the extension might be collecting through its unlimited storage capability.

Findings

HIGH

Broad Content Script Injection

This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: webNavigation

This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

alarms
scripting
storage
unlimitedStorage
declarativeNetRequest
webNavigation

Host Permissions:

<all_urls>

Embedded URLs (230 total):

https://github.com/AdguardTeam/ExtendedCss	http://www.apache.org/licenses/LICENSE-2.0
https://developer.mozilla.org/en/JavaScript/Reference/Global_Objects/regexp	https://github.com/AdguardTeam/FingerprintingBlocker/blob/master/src/shared/url.ts#L64
https://github.com/ariya/phantomjs/issues/14832	https://github.com/kriskowal/asap/blob/master/browser-raw.js#L140
https://github.com/Polymer/WeakMap	https://docs.microsoft.com/en-us/scripting/javascript/reference/set-object-javascript
https://sizzlejs.com/	https://js.foundation/
https://github.com/AdguardTeam/sizzle-extcss	https://jsperf.com/thor-indexof-vs-for/5
http://www.w3.org/TR/css3-selectors/#whitespace	http://www.w3.org/TR/CSS21/syndata.html#value-def-identifier
http://www.w3.org/TR/selectors/#attribute-selectors	http://www.w3.org/TR/CSS21/syndata.html#escaped-characters
https://drafts.csswg.org/cssom/#common-serializing-idioms	https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	https://html.spec.whatwg.org/multipage/forms.html#category-listed
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
https://bugs.jquery.com/ticket/13378	https://bugs.jquery.com/ticket/12359
https://msdn.microsoft.com/en-us/library/ie/hh465388.aspx#attribute_section	http://www.w3.org/TR/2011/REC-css3-selectors-20110929/#checked
https://bugs.webkit.org/show_bug.cgi?id=136851	https://github.com/jquery/sizzle/pull/225
http://www.w3.org/TR/selectors/#pseudo-classes	http://www.w3.org/TR/selectors/#lang-pseudo
http://www.w3.org/TR/selectors/#empty-pseudo	https://github.com/AdguardTeam/ExtendedCss/issues/55#issuecomment-364058745
https://w3c.github.io/webappsec-trusted-types/dist/spec/	https://msdn.microsoft.com/en-us/library/ms536429%28VS.85%29.aspx
https://bugs.webkit.org/show_bug.cgi?id=93445	https://developer.mozilla.org/en-US/docs/Web/CSS/:is
https://github.com/AdguardTeam/ExtendedCss/blob/master/README.md	https://github.com/AdguardTeam/ExtendedCss/issues/55
https://github.com/AdguardTeam/ExtendedCss/issues/120	https://github.com/AdguardTeam/ExtendedCss/issues/81
https://clients2.google.com/service/update2/crx	https://www.youtube.com/
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Number/isNaN	https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Number/isFinite
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Math/random#getting_a_random_integer_between_two_values_inclusive	https://github.com/AdguardTeam/Scriptlets/issues/282
https://github.com/AdguardTeam/Scriptlets/issues/125	https://developer.mozilla.org/en-US/docs/Web/API/EventTarget/addEventListener#parameters
https://github.com/AdguardTeam/Scriptlets/issues/76	https://developer.mozilla.org/en-US/docs/Web/API/EventListener
https://github.com/AdguardTeam/Scriptlets/issues/262	https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/flat
https://github.com/AdguardTeam/Scriptlets/issues/216	https://github.com/AdguardTeam/Scriptlets/issues/201
http://127.0.0.1:8080/scriptlets/tests/dist/qunit.js:1834:20	http://127.0.0.1:8080/scriptlets/tests/dist/qunit.js:3178:16
https://developer.mozilla.org/en-US/docs/Web/API/NodeList	https://developer.mozilla.org/en-US/docs/Web/API/setTimeout#parameters
https://github.com/AdguardTeam/Scriptlets/issues/247	https://github.com/AdguardTeam/Scriptlets/issues/105
https://github.com/AdguardTeam/Scriptlets/issues/71	https://developer.microsoft.com/en-us/microsoft-edge/platform/issues/14495220/
https://github.com/AdguardTeam/Scriptlets/issues/345	https://github.com/AdguardTeam/Scriptlets/issues/82
https://github.com/AdguardTeam/Scriptlets/issues/367	https://github.com/AdguardTeam/Scriptlets/issues/216#issuecomment-1178591463
https://github.com/AdguardTeam/Scriptlets/issues/251	https://github.com/AdguardTeam/Scriptlets/issues/226
https://github.com/AdguardTeam/Scriptlets/issues/232	https://github.com/AdguardTeam/Scriptlets/issues/128
https://github.com/AdguardTeam/Scriptlets/issues/284#issuecomment-1419464354	https://github.com/AdguardTeam/Scriptlets/issues/284
https://github.com/gorhill/uBlock/wiki/Resources-Library#abort-on-property-readjs-	https://gitlab.com/eyeo/snippets/-/blob/main/source/behavioral/abort-on-property-read.js
https://github.com/gorhill/uBlock/wiki/Resources-Library#abort-on-property-writejs-	https://gitlab.com/eyeo/snippets/-/blob/main/source/behavioral/abort-on-property-write.js
https://github.com/gorhill/uBlock/wiki/Resources-Library#no-settimeout-ifjs-	https://github.com/gorhill/uBlock/wiki/Resources-Library#no-setinterval-ifjs-
https://github.com/gorhill/uBlock/wiki/Resources-Library#no-window-open-ifjs-	https://github.com/gorhill/uBlock/wiki/Resources-Library#abort-current-inline-scriptjs-

Page 1 of 3

Raw Manifest

{
  "name": "__MSG_appName__",
  "icons": {
    "128": "eclipse.png"
  },
  "action": {
    "default_popup": "popup/popup.html",
    "default_title": "__MSG_appName__"
  },
  "version": "2.0.1",
  "background": {
    "service_worker": "ServiceWorker.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "permissions": [
    "alarms",
    "scripting",
    "storage",
    "unlimitedStorage",
    "declarativeNetRequest",
    "webNavigation"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "ExtendedCSS.js",
        "ContentScript.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*/*"
      ],
      "all_frames": true,
      "match_about_blank": true
    },
    {
      "js": [
        "youtube.js"
      ],
      "run_at": "document_start",
      "matches": [
        "https://www.youtube.com/*"
      ],
      "all_frames": true,
      "match_about_blank": true
    }
  ],
  "host_permissions": [
    "<all_urls>"
  ],
  "manifest_version": 3,
  "declarative_net_request": {
    "rule_resources": [
      {
        "id": "1",
        "path": "static_filters/r_0.json",
        "enabled": true
      },
      {
        "id": "2",
        "path": "static_filters/r_1.json",
        "enabled": true
      },
      {
        "id": "3",
        "path": "static_filters/r_2.json",
        "enabled": true
      },
      {
        "id": "4",
        "path": "static_filters/r_3.json",
        "enabled": true
      }
    ]
  },
  "web_accessible_resources": [
    {
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "resources": [
        "static_filters/redirects/*"
      ],
      "use_dynamic_url": true
    }
  ]
}

by ✦ Astarte

Eclipse Ad Blocker

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (230 total):

Raw Manifest

Detections

Manifest Findings