Starting analysis...
Version 1.0 View in Chrome Web Store
The extension has a relatively small user base of 1,000 users and a decent rating of 4.7, but lacks crucial transparency elements. The missing author information, developer details, and last updated date raise significant red flags about accountability and maintenance. The name suggests it's a Pinterest Pixel Helper tool, which would typically assist with Pinterest advertising pixel implementation and debugging.
The extension exhibits several alarming characteristics that far exceed what would be necessary for a Pinterest pixel helper. The combination of webRequest, webNavigation, and broad host permissions creates a powerful surveillance toolkit that could monitor all web traffic and user behavior across every website visited. Content script injection on all URLs means the extension can read sensitive data like passwords, financial information, and personal details from any website. The gcm permission for Google Cloud Messaging adds another layer of potential data exfiltration capability. For a tool that should only need to interact with Pinterest-related pixels, these permissions are grossly excessive.
Do not install this extension. If Pinterest pixel debugging is needed, use Pinterest's official Business Tools or well-established alternatives from verified developers. The permission set suggests potential malware or data harvesting rather than legitimate functionality. If you must use similar tools, look for extensions with transparent developer information, regular updates, larger user bases, and permissions that match their stated purpose.
| https://fonts.googleapis.com/css2?family=Poppins&display=swap | https://clients2.google.com/service/update2/crx |
{ "name": "📌 Pinterest Pixel Helper 🛠️ ", "icons": { "16": "icons/Icon 16.png", "48": "icons/Icon 48.png", "128": "icons/Icon 128.png" }, "action": { "default_popup": "popup.html" }, "version": "1.0", "background": { "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "🚀 Install this chrome extension to assist you in constructing, troubleshooting, and testing your Pinterest Tags. 🧰 ", "permissions": [ "webRequest", "storage", "webNavigation", "notifications", "gcm" ], "content_scripts": [ { "js": [ "content.js" ], "run_at": "document_end", "matches": [ "<all_urls>" ] } ], "host_permissions": [ "<all_urls>" ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.