[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Starting analysis...

Choose Your Chrome Tools

Version 1.0.2823.0 View in Chrome Web Store

Last scanned: 10 months ago | force re-scan

Extension Details

Developer: thesqout.com

Rating: 3.1 ★ (8 ratings)

Users: 200,000

Context-Aware Verdict

CRITICAL

Overall Risk

Based on 8 total findings, ranked without considering overall context, including 5 high-risk and 3 medium-risk findings.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: cookies

This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: management

This extension has the management permission. Can manage other extensions. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: notifications

This extension has the notifications permission. Can show notifications.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

contextMenus
tabs
storage
cookies
webRequest
management
scripting
notifications
idle
alarms

Host Permissions:

<all_urls>

Content Security Policy:

extension_pages: script-src 'self'; object-src 'self'

Embedded URLs (18 total):

https://sqoutout.com	https://thesqout.com
https://ext.sqoutout.com	https://ext.sqoutit.com
http://unknow.com	https://ext.sqoutout.com/src/background.bund.js.0c9a744bf46948bdaf69.map
https://ext.sqoutout.com/src/style.css.0c9a744bf46948bdaf69.map	https://reactjs.org/docs/error-decoder.html?invariant=
http://www.w3.org/1999/xlink	http://www.w3.org/XML/1998/namespace
http://www.w3.org/1999/xhtml	http://www.w3.org/1998/Math/MathML
http://www.w3.org/2000/svg	https://ext.sqoutout.com/src/popup.bund.js.0c9a744bf46948bdaf69.map
https://fonts.googleapis.com	https://fonts.gstatic.com
https://fonts.googleapis.com/css2?family=Source+Sans+Pro:wght@400	https://clients2.google.com/service/update2/crx

Raw Manifest

{
  "name": "Choose Your Chrome Tools",
  "icons": {
    "16": "icons/icon16.png",
    "128": "icons/icon128.png"
  },
  "action": {
    "default_icon": {
      "16": "icons/icon16.png",
      "128": "icons/icon128.png"
    },
    "default_popup": "popup.html",
    "default_title": "Choose Your Chrome Tools"
  },
  "version": "1.0.2823.0",
  "background": {
    "service_worker": "background.bund.js"
  },
  "short_name": "Choose Your Chrome Tools",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Choose where your extensions shouldn’t be active. They will be automatically disabled when you visit and enabled everywhere else.",
  "permissions": [
    "contextMenus",
    "tabs",
    "storage",
    "cookies",
    "webRequest",
    "management",
    "scripting",
    "notifications",
    "idle",
    "alarms"
  ],
  "host_permissions": [
    "<all_urls>"
  ],
  "manifest_version": 3,
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'self'"
  },
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "icons/*"
      ]
    }
  ]
}

by ✦ Astarte

Choose Your Chrome Tools

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Content Security Policy:

Embedded URLs (18 total):

Raw Manifest

Detections

Manifest Findings