[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

MyStart Wallpapers New Tab Page

Version 3.0.16 View in Chrome Web Store

Last scanned: about 4 hours ago

Extension Details

Developer: https://mystart.com/

Rating: 4.3 ★ (13 ratings)

Users: 4,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension comes from mystart.com, which appears to be a legitimate web service provider. With 4,000 users and a 4.3-star rating from 13 reviews, it has modest adoption but positive user feedback. The manifest version 3 compliance indicates modern security standards. However, the relatively small user base and limited review count make it difficult to fully assess long-term reliability.

Concerns:

The tabs permission is concerning for a wallpaper/new tab extension, as this level of access allows the extension to view and manipulate all browser tabs, including their URLs and content. This goes beyond what's typically necessary for a simple wallpaper service. The storage permission, while common, allows data collection and retention. The content script injection on mystart.com domains could potentially be used for tracking or data collection purposes.

Recommendations:

Consider running this extension in a separate Chrome profile if you choose to use it, given the elevated tab access permissions. Monitor your browsing behavior for any unexpected changes or redirects. Regularly review what data the extension might be collecting through its storage capabilities. Alternative new tab extensions with more limited permissions might provide similar functionality with reduced privacy risks. If you notice any suspicious tab behavior or unwanted redirects, remove the extension immediately.

Findings

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage
topSites
tabs

Embedded URLs (27 total):

https://www.mystart.com/new-tab/newtab/	https://www.google-analytics.com/collect
https://analytics.vmn.net/piwik.php?	https://www.google.com/s2/favicons?domain=
https://vmn.net	https://blog.mystart.com/contact/
https://blog.mystart.com/privacy/	https://blog.mystart.com/terms/
https://mystart.mystartcdn.com/new-tab/newtab/	https://fonts.googleapis.com/css?family=Imprima
https://www.mystart.com/	https://www.mystart.com/mystartsearch/
https://blog.mystart.com	https://www.facebook.com/MyStart/
https://dsv.mystart.com/api/?kwd=	https://blog.mystart.com/pulldown.php
https://gallery.mystartcdn.com/mystart/gallery.json	https://gallery.mystartcdn.com/mystart/images/trey-ratcliff-falls-mckay.jpg
https://search.yahoo.com/search?p=	https://www.bing.com/search?q=
https://www.mystart.com/browser-extensions/ms/results.php?prod=exnt&pr=msext&pid=mystart&v=	https://www.mystart.com/browser-extensions/gg/results.php?prod=exnt&pr=msext&pid=mystart&v=
https://www.mystart.com/browser-extensions/gg/results.php?prod=exnt&pr=msext&pid=	https://blog.mystart.com/
https://blog.mystart.com/uninstall/	https://blog.mystart.com/thankyou/
https://clients2.google.com/service/update2/crx

Raw Manifest

{
  "name": "MyStart Wallpapers New Tab Page",
  "icons": {
    "16": "icons/16.png",
    "38": "icons/38.png",
    "48": "icons/48.png",
    "64": "icons/64.png",
    "128": "icons/128.png"
  },
  "action": {
    "default_icon": {
      "64": "icons/64.png",
      "128": "icons/128.png"
    },
    "default_title": "MyStart Wallpapers New Tab Page"
  },
  "version": "3.0.16",
  "background": {
    "type": "module",
    "service_worker": "main.js"
  },
  "short_name": "MyStart",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "MyStart is a fresh and highly convenient New Tab page to start your journey on the web. Enjoy beautiful images of nature and more.",
  "permissions": [
    "storage",
    "topSites",
    "tabs"
  ],
  "content_scripts": [
    {
      "js": [
        "js/content-scripts/installed.js",
        "js/content-scripts/event-handler.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*.mystart.com/*"
      ]
    }
  ],
  "manifest_version": 3,
  "chrome_url_overrides": {
    "newtab": "newtab/index.html"
  },
  "externally_connectable": {
    "matches": [
      "*://*.mystart.com/*"
    ]
  }
}

by ✦ Astarte