[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Перья

Version 1.6 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Developer: https://atavi.com/browser-themes/p/plumage/chrome-themes-top/

Rating: 3.5 ★ (220 ratings)

Context-Aware Verdict

LOW

Overall Risk

Trust Factors:

The extension "Перья" (Feathers in Russian) appears to be a browser theme from Atavi, a known browser customization company. With 220 user ratings averaging 3.5 stars, it has moderate user engagement. Atavi has an established presence in the browser theme market, which adds some credibility to the extension.

Concerns:

The primary concern is the use of Manifest Version 2, which lacks the enhanced security protections of Manifest V3. This older framework has weaker permission controls and less restrictive content security policies. The extension name being in Cyrillic characters may raise questions for users unfamiliar with Russian, though this alone isn't a security risk. The lack of detailed permission information makes it difficult to assess what system access the extension requires.

Recommendations:

Given the low overall risk assessment, this extension appears safe for general use. However, users concerned about security should consider waiting for a Manifest V3 update or look for alternative theme extensions that have already migrated. If you choose to install it, monitor for any unusual browser behavior. The extension's theme functionality should be straightforward and shouldn't require extensive system permissions, so any requests for broad access would be concerning.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "app": {
    "urls": [
      "http://atavi.com/browser-themes/"
    ],
    "launch": {
      "web_url": "http://atavi.com/browser-themes/?from=chrome-themes&tid=plumage"
    }
  },
  "link": "http://atavi.com/browser-themes/",
  "name": "__MSG_appName__",
  "theme": {
    "colors": {
      "frame": [
        230,
        230,
        230
      ],
      "toolbar": [
        228,
        228,
        228,
        0.6
      ],
      "ntp_link": [
        0,
        0,
        0
      ],
      "ntp_text": [
        0,
        0,
        0
      ],
      "tab_text": [
        0,
        0,
        0
      ],
      "bookmark_text": [
        0,
        0,
        0
      ],
      "ntp_background": [
        255,
        255,
        255
      ],
      "ntp_link_underline": [
        0,
        0,
        0
      ],
      "tab_background_text": [
        0,
        0,
        0
      ]
    },
    "images": {
      "theme_frame": "images/theme_frame.png",
      "theme_toolbar": "images/theme_toolbar.png",
      "theme_ntp_background": "images/theme_ntp_background.png",
      "theme_tab_background": "images/theme_tab_background.png"
    },
    "properties": {
      "ntp_background_repeat": "no-repeat",
      "ntp_background_alignment": "middle"
    }
  },
  "version": "1.6",
  "short_name": "Awesome theme for Atavi.com",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "default_locale": "ru",
  "manifest_version": 2
}

by ✦ Astarte

Перья

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Embedded URLs (3 total):

Raw Manifest

Detections

Manifest Findings

https://clients2.google.com/service/update2/crx	http://atavi.com/browser-themes/
http://atavi.com/browser-themes/?from=chrome-themes&tid=plumage