Spark Auto RefreshSecurity Analysis

Chromev1.0.3MV3February 18, 2026 at 11:36 AM
Use with caution

This extension requests significant permissions. It has 10K+ users, but review the findings below.

4.3MEDIUM
4.3 MEDIUMRaw: 4.8

This extension shows some risk signals that are common in legitimate extensions but worth reviewing. Check the details below.

Based on 4 permissions including high-risk ones, 7 code findings.

Trust Signals(2.0/10)

Users
10K
Rating
4.9(21 reviews)
Permissions
7.0/10
Code
7.1/10
Combinations
0.0/10
Manifest/CSP
1.7/10

Permissions(4 analyzed)

Code Findings(6 patterns, 7 total)

Libraries(1 detected)

1 library detected

Content Security Policy

No CSP Defined(1 issue)
MEDIUM
N/ANo CSP defined

This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.

Manifest Analysis(0 findings)

Resolved from __MSG_* i18n placeholders:

Name: Spark Auto Refresh

Description: Spark Auto Refresh: Ignite Your Browsing Experience with Seamless Page Refreshing!

No manifest-level concerns found.

External Domains(5)

fb.megithub.commomentjs.compopper.js.orgreactjs.org

Indicators of Compromise

6 indicators of compromise found

File Statistics

71
Total Files
2
JS Files
1.1 MB
Total Size

Other Scanned Extensions