[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Shift Digital Analytics Debugger

Version 3.9440.17851 View in Chrome Web Store

Last scanned: 8 days ago | force re-scan

Extension Details

Rating: 5.0 ★ (5 ratings)

Users: 2,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 1 total findings, including 1 high-risk finding.

Findings

HIGH

Broad Content Script Injection

This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.

Raw Manifest

{
  "name": "Shift Digital Analytics Debugger",
  "icons": {
    "128": "img/SD_AnalyticsDebugger_icon_128x128.png"
  },
  "action": {
    "default_icon": "img/SD_AnalyticsDebugger_icon_32x32.png"
  },
  "version": "3.9440.17851",
  "background": {
    "type": "module",
    "service_worker": "js/background/background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "This extension monitors data being sent to the Shift Digital analytics servers.",
  "devtools_page": "devtools.html",
  "content_scripts": [
    {
      "js": [
        "js/contentScript/contentScript.js"
      ],
      "run_at": "document_start",
      "matches": [
        "<all_urls>"
      ]
    }
  ],
  "manifest_version": 3
}

by ✦ Astarte

http://getbootstrap.com	https://github.com/twbs/bootstrap/blob/master/LICENSE
https://registry.npmjs.org/@types/chrome/-/chrome-0.0.208.tgz	https://registry.npmjs.org/@types/filesystem/-/filesystem-0.0.32.tgz
https://registry.npmjs.org/@types/filewriter/-/filewriter-0.0.29.tgz	https://registry.npmjs.org/@types/har-format/-/har-format-1.2.10.tgz
https://clients2.google.com/service/update2/crx	http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd
http://www.w3.org/2000/svg

Shift Digital Analytics Debugger

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Embedded URLs (9 total):

Raw Manifest

Detections

Manifest Findings