CRX aminer
Extension icon

Vue force dev

Version 2.1.1 View in Chrome Web Store

Last scanned: about 4 hours ago

Extension Details

Rating: 4.5 ★ (37 ratings)
Users: 10,000

Context-Aware Verdict

HIGH
Overall Risk
Trust Factors:

The extension has a decent user base of 10,000 users and maintains a solid 4.5-star rating from 37 reviews, suggesting users find it functional. However, the lack of visible developer information and company details raises transparency concerns. The name "Vue force dev" suggests it's a development tool for Vue.js applications, which would typically require broad access to function properly.

Concerns:

The extension's broad permissions are extremely concerning given the limited context. The <all_urls> host permissions combined with content script injection capabilities across all websites creates a significant attack surface. For a Vue.js development tool, these permissions might be necessary for debugging and inspecting Vue applications across different domains, but they also enable the extension to access sensitive data on banking sites, email platforms, and other confidential web applications. The absence of clear developer identification makes it difficult to verify the extension's legitimacy and trustworthiness.

Recommendations:

Consider running this extension in a separate Chrome profile dedicated to development work only. Avoid using this profile for personal browsing, banking, or accessing sensitive websites. Regularly review the extension's behavior and consider alternatives with more limited permissions if available. If you're not actively developing Vue.js applications, this extension's broad access is unnecessary and should be removed. Monitor for any unusual network activity or website behavior when the extension is active.

Findings

HIGH
Broad Content Script Injection
This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.