[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Bitcoin Dashboard

Version 0.2.5 View in Chrome Web Store

Last scanned: about 1 hour ago

Extension Details

Rating: 5.0 ★ (8 ratings)

Users: 786

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 1 total findings, including 1 high-risk finding.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

Security Analysis Details

Host Permissions:

https://bitcoinmagazine.com/*

Content Security Policy:

extension_pages: script-src 'self'; object-src 'self'; connect-src https://* data: blob: filesystem:;

Embedded URLs (43 total):

https://clients2.google.com/service/update2/crx	https://bitcoinmagazine.com/
https://www.robotstxt.org/robotstxt.html	http://fb.me/use-check-prop-types
https://reactjs.org/docs/error-decoder.html?invariant=	http://www.w3.org/1999/xlink
http://www.w3.org/XML/1998/namespace	http://www.w3.org/2000/svg
http://www.w3.org/1998/Math/MathML	http://www.w3.org/1999/xhtml
https://api.coingecko.com/api/v3/coins/bitcoin?localization=false&tickers=false&market_data=true	https://api.blockchain.info/q/hashrate
https://mempool.space/api/v1/fees/recommended	https://bitcoinmagazine.com/technical/bitcoins-hash-rate-difficulty-fees?utm_source=bm-extension&utm_medium=extension
https://bitcoinmagazine.com/markets/bitcoins-market-cap-hits-all-time-high?utm_source=bm-extension&utm_medium=extension	https://curly-sun-f84e.btcmag.workers.dev/
https://bitcoinmagazine.com?utm_source=bm-extension&utm_medium=extension	https://bitcoinmagazine.com/?utm_source=bm-extension&utm_medium=extension
https://messari.io/asset/bitcoin?utm_source=bitcoinmagazine&utm_medium=extension	https://mempool.space?utm_source=bitcoinmagazine&utm_medium=extension
http://fb.me/prop-types-in-prod	https://tools.ietf.org/html/rfc5646
https://github.com/catamphetamine/relative-time-format/issues/2	https://tools.ietf.org/html/rfc4647#section-3.4
https://unpkg.com/make-plural/	http://www.unicode.org/cldr/charts/latest/supplemental/language_plural_rules.html
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/PluralRules	https://github.com/tc39/proposal-intl-relative-time
https://github.com/tc39/proposal-intl-relative-time/issues/55	https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/DateTimeFormat/resolvedOptions
https://stackoverflow.com/questions/7223359/are-0-and-0-the-same	https://en.wikipedia.org/wiki/IETF_language_tag
https://www.quora.com/What-is-the-average-number-of-days-in-a-month	https://github.com/catamphetamine/javascript-time-ago/issues/21
https://github.com/catamphetamine/javascript-time-ago/issues/22	https://gitlab.com/catamphetamine/react-time-ago/-/issues/5
https://github.com/mui-org/material-ui/blob/a9903917f919092f80d84075f39fb51d51f241f2/packages/mui-material/src/Tooltip/Tooltip.js#L494-L496	https://github.com/mui-org/material-ui/blob/a9903917f919092f80d84075f39fb51d51f241f2/packages/mui-utils/src/useIsFocusVisible.ts#L105
https://caniuse.com/#search=intl	https://gitlab.com/catamphetamine/react-time-ago/-/issues/1
https://www.npmjs.com/package/request-animation-frame-timeout	https://gitlab.com/catamphetamine/react-time-ago/-/issues/4
https://bitcoinmagazine.com/guides/what-are-sats?utm_source=bm-extension&utm_medium=extension

Raw Manifest

{
  "name": "Bitcoin Dashboard",
  "icons": {
    "128": "bm-logo.png"
  },
  "action": {
    "default_popup": "index.html",
    "default_title": "Bitcoin Dashboard"
  },
  "version": "0.2.5",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Get live updates on price, news, and key network metrics.",
  "host_permissions": [
    "https://bitcoinmagazine.com/*"
  ],
  "manifest_version": 3,
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'self'; connect-src https://* data: blob: filesystem:;"
  }
}

by ✦ Astarte