Extension Details
Rating:
5.0 ★
(2 ratings)
Size:
7.16MiB
Last Updated:
January 25, 2016
Users:
33
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
MEDIUM
Risk Level
Trust Factors:
- The extension has a relatively small user base (33 users), which could indicate a lack of widespread adoption or vetting.
- The developer information is not provided, making it difficult to assess the reputation or trustworthiness of the extension's creator.
- The extension has not been updated since 2016, which raises concerns about its compatibility with modern browsers and potential security vulnerabilities.
Concerns:
- The "contextMenus" permission allows the extension to add items to the context menu, which could potentially be used for malicious purposes, such as injecting unwanted content or redirecting users to malicious websites.
- The use of Manifest Version 2 indicates that the extension may not have the latest security features and restrictions implemented in Manifest Version 3.
Recommendations:
- Exercise caution when installing and using this extension, as the lack of developer information and the small user base make it difficult to assess its trustworthiness.
- Consider using alternative extensions from reputable developers with a larger user base and more frequent updates.
- If you decide to use this extension, it is recommended to run it in a separate Chrome profile or a sandboxed environment to minimize potential risks.
- Monitor the extension's behavior and uninstall it immediately if you notice any suspicious activities or unwanted changes to your browsing experience.
Security Analysis
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
MEDIUM
Overall Risk
Based on 2 total findings, ranked without considering overall context, including 0 high-risk and 2 medium-risk findings.
MEDIUM
Medium-Risk Permission: contextMenus
This extension has the contextMenus permission. Can add items to the context menu.
MEDIUM
Older Manifest Version
This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.
Security Analysis Details
Required Permissions:
- contextMenus
Embedded URLs (4639 total):
| https://clients2.google.com/service/update2/crx | https://github.com/radiovisual/github-npm-lookup | |
| https://www.npmjs.com/package/ | https://developer.mozilla.org/en-US/docs/SpiderMonkey/Parser_API | |
| http://marijnhaverbeke.nl/git/acorn | https://github.com/marijnh/acorn.git | |
| https://github.com/marijnh/acorn/issues | http://en.wikipedia.org/wiki/ANSI_escape_code#graphics | |
| http://msdn.microsoft.com/en-us/library/ie/dww52sbt | http://en.wikipedia.org/wiki/Operator-precedence_parser | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=745678 | https://github.com/mozilla/sweet.js/wiki/design | |
| https://registry.npmjs.org/acorn/-/acorn-1.2.2.tgz | http://registry.npmjs.org/acorn/-/acorn-1.2.2.tgz | |
| https://github.com/marijnh/acorn | https://travis-ci.org/marijnh/acorn.svg?branch=master | |
| https://travis-ci.org/marijnh/acorn | https://img.shields.io/npm/v/acorn.svg | |
| https://www.npmjs.org/package/acorn | https://marijnhaverbeke.nl/fund/status_s.png?force | |
| https://marijnhaverbeke.nl/fund/ | http://npmjs.org | |
| https://github.com/Constellation/escodegen | http://www.html5rocks.com/en/tutorials/security/content-security-policy/#eval-too | |
| https://github.com/marijnh/acorn/issues/90 | https://github.com/marijnh/acorn/issues/123 | |
| http://browserify.org | http://babeljs.io/ | |
| https://github.com/marijnh/acorn/tree/jsx | https://registry.npmjs.org/acorn-to-esprima/-/acorn-to-esprima-1.0.7.tgz | |
| https://github.com/babel/acorn-to-esprima/issues | http://registry.npmjs.org/acorn-to-esprima/-/acorn-to-esprima-1.0.7.tgz | |
| https://github.com/babel/acorn-to-esprima#readme | https://github.com/babel/acorn-to-esprima.git | |
| https://github.com/babel/babel-eslint | https://github.com/jscs-dev/babel-jscs | |
| https://github.com/fkling/esprima_ast_explorer | https://github.com/babel/babel-eslint/blob/master/index.js | |
| https://github.com/jonschlinkert/align-text | https://registry.npmjs.org/align-text/-/align-text-0.1.3.tgz | |
| https://github.com/jonschlinkert | https://github.com/jonschlinkert/align-text/issues | |
| http://registry.npmjs.org/align-text/-/align-text-0.1.3.tgz | https://badge.fury.io/js/align-text.svg | |
| http://badge.fury.io/js/align-text | https://travis-ci.org/jonschlinkert/align-text.svg | |
| https://travis-ci.org/jonschlinkert/align-text | https://cloud.githubusercontent.com/assets/383994/8051597/7b716fbc-0e4c-11e5-9aef-4493fd22db58.png | |
| https://www.npmjs.com/ | https://github.com/jonschlinkert/center-align | |
| https://github.com/bahamas10/node-justify | https://github.com/jonschlinkert/longest | |
| https://github.com/jonschlinkert/right-align | https://github.com/jonschlinkert/repeat-string | |
| https://github.com/jonschlinkert/word-wrap | https://github.com/jonschlinkert/align-text/issues/new | |
| http://twitter.com/jonschlinkert | https://github.com/assemble/verb-cli | |
| https://registry.npmjs.org/alter/-/alter-0.2.0.tgz | http://registry.npmjs.org/alter/-/alter-0.2.0.tgz | |
| https://github.com/olov/alter.git | http://github.com/jrburke/amdefine | |
| https://registry.npmjs.org/amdefine/-/amdefine-1.0.0.tgz | http://github.com/jrburke | |
| https://github.com/jrburke/amdefine/issues | http://registry.npmjs.org/amdefine/-/amdefine-1.0.0.tgz | |
| https://github.com/jrburke/amdefine.git | https://github.com/jrburke/amdefine/raw/latest/amdefine.js | |
| http://requirejs.org/docs/optimization.html | http://requirejs.org/docs/api.html#text | |
| https://github.com/jrburke/require-cs | https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-1.1.0.tgz | |
| https://github.com/sindresorhus/ansi-escapes/issues | http://registry.npmjs.org/ansi-escapes/-/ansi-escapes-1.1.0.tgz | |
| https://github.com/sindresorhus/ansi-escapes | https://travis-ci.org/sindresorhus/ansi-escapes.svg?branch=master | |
| https://travis-ci.org/sindresorhus/ansi-escapes | http://www.termsys.demon.co.uk/vtansi.htm | |
| https://github.com/chalk/ansi-styles | http://sindresorhus.com |
Page 1 of 58
Raw Manifest
{ "name": "npm lookup", "icons": { "128": "media/icon.png" }, "version": "2.0.0", "background": { "scripts": [ "menu.js" ] }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Turn selected text on a webpage into an npm package lookup", "permissions": [ "contextMenus" ], "homepage_url": "https://github.com/radiovisual/github-npm-lookup", "manifest_version": 2, "minimum_chrome_version": "38" }
Secure Annex (beta)
Coming soon...