__MSG_extension_name__Security Analysis

Extension intercepts network traffic and sends data externally — potential man-in-the-middle behavior.

Extension has access to all sites and captures keyboard input — behavior consistent with a keylogger.

Injects and executes scripts in web pages programmatically.

Uses eval() to execute dynamic code, a common technique for obfuscation and code injection.

Dynamically sets a script's src attribute to load external code at runtime.

Dynamically creates script elements, potentially loading external malicious code.

Creates functions from strings, similar to eval(), often used to hide malicious code.

Listens for keyboard events, a common technique used by keyloggers.

Uses eval() to execute dynamic code — a common vector for code injection.

Creates a function from a string (new Function()), similar to eval().

Object.defineProperty() called on document — can intercept and override built-in browser APIs.

Cross-site scripting via xlink:href attributes

Prototype pollution via merge function

XSS via SVG attributes

XSS in jQuery.when with untrusted input

Modifies window.location to redirect the user, potentially to phishing or malicious pages.

Uses XMLHttpRequest to make network calls.

Sends messages via Chrome runtime, could communicate with external services.

Dynamically creates iframe elements, which can be used to load external content or hide malicious UI.

Decodes base64 data, commonly used to hide malicious payloads.

Line exceeds 5000 characters (entropy: 6.016142440418555)

XSS via HTML passed to DOM manipulation methods

JavaScript files are exposed as web-accessible resources. Matched websites can load and interact with extension scripts.

Extension uses tab tracking APIs (onUpdated/query) and communicates with external servers — potential browsing surveillance.

Encodes data to base64, may be used for data exfiltration.

Sets innerHTML directly, which can lead to XSS if used with untrusted data.

Reads or writes to localStorage, which may contain sensitive site data.

Creates a Web Worker, which runs code in a separate thread — can be used for background computation or crypto mining.

String with entropy 6 bits — may be encoded/encrypted data

object-src is not set to 'none'. Plugins like Flash can be embedded, which may allow code execution.

js/libs/angular-animate-1.3.15.js

js/libs/jquery-2.1.0.js

js/libs/angular-route-1.3.15.js

js/libs/angular-1.3.15.js

js/libs/angular-resource-1.3.15.js