Chrome-Stats - Extension Analyzer

Version 1.0.3 View in Chrome Web Store

Last scanned: 20 days ago | force re-scan

Extension Details

Developer: chrome-stats.com

Rating: 5.0 ★ (2 ratings)

Users: 974

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 3 total findings, including 1 high-risk finding.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: https://chromewebstore.google.com/detail/*, https://play.google.com/store/apps/*. Ensure you trust this extension with access to these sites.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

Security Analysis Details

Required Permissions:

activeTab
sidePanel

Host Permissions:

https://chrome-stats.com/
https://*.chrome-stats.com/
https://chromewebstore.google.com/detail/*
https://play.google.com/store/apps/*
https://microsoftedge.microsoft.com/addons/detail/*
https://addons.mozilla.org/*

Embedded URLs (41 total):

https://clients2.google.com/service/update2/crx	https://chrome-stats.com/
https://chromewebstore.google.com/detail/	https://play.google.com/store/apps/
https://microsoftedge.microsoft.com/addons/detail/	https://addons.mozilla.org/
http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
https://getbootstrap.com/	https://github.com/twbs/bootstrap/blob/main/LICENSE
http://www.w3.org/1999/xhtml	https://svelte.dev/e/await_outside_boundary
https://svelte.dev/e/lifecycle_outside_component	https://svelte.dev/e/async_derived_orphan
https://svelte.dev/e/effect_in_teardown	https://svelte.dev/e/effect_in_unowned_derived
https://svelte.dev/e/effect_orphan	https://svelte.dev/e/effect_update_depth_exceeded
https://svelte.dev/e/props_invalid_value	https://svelte.dev/e/state_descriptors_fixed
https://svelte.dev/e/state_prototype_fixed	https://svelte.dev/e/state_unsafe_mutation
https://svelte.dev/e/select_multiple_invalid_value	https://chromewebstore.google.com/
https://static.chrome-stats.com/icons/chrome.svg	https://microsoftedge.microsoft.com/addons/
https://static.chrome-stats.com/icons/edge.svg	https://static.chrome-stats.com/icons/firefox.svg
https://play.google.com/store/apps/details?id=	https://static.chrome-stats.com/icons/android.svg
https://lodash.com/	https://openjsf.org/
https://lodash.com/license	http://underscorejs.org/LICENSE
https://npms.io/search?q=ponyfill.	https://static.chrome-stats.com/empty-image.svg
https://static.chrome-stats.com/icons/information.svg	https://microsoftedge.microsoft.com/
https://chrome-stats.com/api/detail?id=	https://chrome-stats.com/d/
https://chrome-stats.com

Raw Manifest

{
  "name": "Chrome-Stats - Extension Analyzer",
  "icons": {
    "16": "logo/logo_16.png",
    "32": "logo/logo_32.png",
    "48": "logo/logo_48.png",
    "64": "logo/logo_64.png",
    "128": "logo/logo_128.png"
  },
  "action": {
    "default_icon": {
      "16": "logo/logo_16.png",
      "32": "logo/logo_32.png",
      "48": "logo/logo_48.png"
    },
    "default_popup": "popup.html",
    "default_title": "Chrome-Stats"
  },
  "author": "admin@chrome-stats.com",
  "version": "1.0.3",
  "short_name": "Chrome-Stats",
  "side_panel": {
    "default_path": "sidebar.html"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Access stats, ranking, and risk scores on browser extensions.",
  "permissions": [
    "activeTab",
    "sidePanel"
  ],
  "homepage_url": "https://chrome-stats.com/",
  "host_permissions": [
    "https://chrome-stats.com/",
    "https://*.chrome-stats.com/",
    "https://chromewebstore.google.com/detail/*",
    "https://play.google.com/store/apps/*",
    "https://microsoftedge.microsoft.com/addons/detail/*",
    "https://addons.mozilla.org/*"
  ],
  "manifest_version": 3
}

by ✦ Astarte

Chrome-Stats - Extension Analyzer

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (41 total):

Raw Manifest

Detections

Manifest Findings