[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

MonkiBu TV y Radios Online

Version 2.1.6 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Developer: http://www.monkibu.net/

Rating: 4.4 ★ (1.8K ratings)

Users: 20,000

Context-Aware Verdict

HIGH

Overall Risk

Based on 4 total findings, including 3 high-risk findings.

Findings

HIGH

Dangerous Permission Combination: webRequest + webRequestBlocking

This extension can intercept, modify, and block web requests in real-time. This combination could be used to modify sensitive web traffic or steal data.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequestBlocking

This extension has the webRequestBlocking permission. Can block and modify web requests in real-time. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Required Permissions:

webRequest
webRequestBlocking
*://*.juicedev.me/*
*://*.monkibu.net/*

Optional Permissions:

http://*/*
https://*/*

Content Security Policy:

script-src 'self' https://ssl.google-analytics.com https://s-static.ak.fbcdn.net https://*.twitter.com https://apis.google.com; object-src 'self'

Embedded URLs (303 total):

https://clients2.google.com/service/update2/crx	https://ssl.google-analytics.com
https://s-static.ak.fbcdn.net	https://apis.google.com
https://ext.juicedev.me/monkibuData/Estado.json	https://ext.juicedev.me
http://angularjs.org	https://errors.angularjs.org/1.7.9/
http://msdn.microsoft.com/en-us/library/ie/cc196988	http://www.ecma-international.org/ecma-262/5.1/#sec-15.4.4.18
https://lodash.com/docs/4.17.4#merge	https://developer.mozilla.org/docs/Web/API/Blob
https://developer.mozilla.org/docs/Web/API/MediaStream	https://developer.mozilla.org/docs/Web/API/CanvasGradient
http://jsperf.com/isobject4	https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/isFinite
https://www.npmjs.com/package/iserror	http://docs.closure-library.googlecode.com/git/local_closure_goog_string_string.js.source.html#line1021
https://developer.mozilla.org/docs/Web/API/File	https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Map
https://developer.mozilla.org/docs/Web/API/ImageData	https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Set
https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/WeakMap	https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Functions/get
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Functions/set	http://en.wikipedia.org/wiki/Partial_application
http://en.wikipedia.org/wiki/Currying#Contrast_with_partial_function_application	https://github.com/angular/angular.js/pull/14221
http://www.ietf.org/rfc/rfc3986.txt	http://tools.ietf.org/html/rfc3986:
http://jsperf.com/object-create2	http://jsperf.com/proto-map-lookup/2
http://jsperf.com/for-in-vs-object-keys2	http://jquery.com
http://api.jquery.com/jQuery/	http://api.jquery.com/addClass/
http://api.jquery.com/after/	http://api.jquery.com/append/
http://api.jquery.com/attr/	http://api.jquery.com/bind/
http://api.jquery.com/on/	http://api.jquery.com/children/
http://api.jquery.com/clone/	http://api.jquery.com/contents/
http://api.jquery.com/css/	http://api.jquery.com/data/
http://api.jquery.com/detach/	http://api.jquery.com/empty/
http://api.jquery.com/eq/	http://api.jquery.com/find/
http://api.jquery.com/hasClass/	http://api.jquery.com/html/
http://api.jquery.com/next/	http://api.jquery.com/off/
http://api.jquery.com/one/	http://api.jquery.com/parent/
http://api.jquery.com/prepend/	http://api.jquery.com/prop/
http://api.jquery.com/ready/	http://api.jquery.com/remove/
http://api.jquery.com/removeAttr/	http://api.jquery.com/removeClass/
http://api.jquery.com/removeData/	http://api.jquery.com/replaceWith/
http://api.jquery.com/text/	http://api.jquery.com/toggleClass/
http://api.jquery.com/triggerHandler/	http://api.jquery.com/unbind/
http://api.jquery.com/val/	http://api.jquery.com/wrap/
https://github.com/angular/angular.js/issues/14251	http://docs.angularjs.org/api/angular.element
http://www.quirksmode.org/js/events_mouse.html#link8	http://jsperf.com/string-indexof-vs-split
https://kangax.github.io/compat-table/es6/#test-Map	http://jsperf.com/angularjs-invoke-apply-vs-switch
http://www.w3.org/html/wg/drafts/html/master/browsers.html#an-indicated-part-of-the-document	https://github.com/angular/angular.js/commit/ffb2701
https://openradar.appspot.com/22186109	https://github.com/angular/angular.js/issues/5695

Page 1 of 4

Raw Manifest

{
  "name": "MonkiBu TV y Radios Online",
  "icons": {
    "128": "static_extension/tv_128.png",
    "256": "static_extension/tv_256.png"
  },
  "version": "2.1.6",
  "background": {
    "page": "background/Background.html"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Mira Televisión y escucha Radios Online, las mejores señales del mundo directamente en tu computador.",
  "permissions": [
    "webRequest",
    "webRequestBlocking",
    "*://*.juicedev.me/*",
    "*://*.monkibu.net/*"
  ],
  "version_name": "2.1.6",
  "browser_action": {
    "default_icon": "static_extension/tvIcon.png",
    "default_popup": "pages/Popup.html"
  },
  "content_scripts": [
    {
      "js": [
        "content_script/detectMonkibuExt.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*.juicedev.me/*",
        "*://*.monkibu.net/*"
      ],
      "all_frames": true
    }
  ],
  "manifest_version": 2,
  "optional_permissions": [
    "http://*/*",
    "https://*/*"
  ],
  "externally_connectable": {
    "matches": [
      "*://*.juicedev.me/*",
      "*://*.monkibu.net/*"
    ]
  },
  "minimum_chrome_version": "61",
  "content_security_policy": "script-src 'self' https://ssl.google-analytics.com https://s-static.ak.fbcdn.net https://*.twitter.com https://apis.google.com; object-src 'self'",
  "web_accessible_resources": [
    "static/*",
    "pages/*",
    "script/*"
  ]
}

by ✦ Astarte

MonkiBu TV y Radios Online

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Content Security Policy:

Embedded URLs (303 total):

Raw Manifest

Detections

Manifest Findings