[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Ripple XRP Price Ticker

Version 3.0 View in Chrome Web Store

Last scanned: about 4 hours ago

Extension Details

Rating: 3.0 ★ (3 ratings)

Users: 453

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 2 total findings, including 1 high-risk finding.

Findings

HIGH

Unsafe JavaScript Evaluation

This extension's Content Security Policy allows 'unsafe-eval', which permits dynamic JavaScript code execution using eval() and similar functions. This is a significant security risk as it could allow execution of malicious code.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: https://data-api.binance.vision/api/v3/ticker/price?symbol=XRPUSDT. Ensure you trust this extension with access to these sites.

Raw Manifest

{
  "name": "Ripple XRP Price Ticker",
  "icons": {
    "16": "logo/xrp-16.png",
    "48": "logo/xrp-48.png",
    "128": "logo/xrp-128.png"
  },
  "action": {
    "default_icon": "xrp-16.png",
    "default_title": "Ripple XRP Price Ticker"
  },
  "version": "3.0",
  "background": {
    "service_worker": "service-worker.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Displays the current Ripple (XRP) price.",
  "host_permissions": [
    "https://data-api.binance.vision/api/v3/ticker/price?symbol=XRPUSDT"
  ],
  "manifest_version": 3,
  "content_security_policy": {
    "sandbox": "sandbox allow-scripts allow-forms allow-popups allow-modals; script-src 'self' 'unsafe-inline' 'unsafe-eval'; child-src 'self';",
    "extension_pages": "script-src 'self'; object-src 'self';"
  }
}

by ✦ Astarte

Ripple XRP Price Ticker

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Host Permissions:

Content Security Policy:

Embedded URLs (3 total):

Raw Manifest

Detections

Manifest Findings

http://www.w3.org/2000/svg	https://clients2.google.com/service/update2/crx
https://data-api.binance.vision/api/v3/ticker/price?symbol=XRPUSDT