Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: 1-click-timer

CRITICAL RISKRemoved from Chrome Web Store

1-click-timer

ID: igloknlllonknnbkfgggfkigmeegmakf

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

8.3.1

Size

3.51 MB

Rating

4.5/5

Reviews

453

Users

154,500

Type

Extension

Updated

Mar 1, 2021

Publisher Contextual Analysis

Author: Alex EwerlöfView Profile
MX records exist: No
Domain exists: No
Is disposable: No
Is role-based: No
Mailbox exists: No

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

154,518

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

a slick and reliable timer app for Google Chrome

Update 2016-10-01: fixed the indicators that were broken in Chrome 53 Set the timer with one click! * Quick and easy * Stylish design * Works offline * Safe: does not need any special permission * Made in Sweden

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium1

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
8.3.1 Code review	3

Extension Version	Code Review Findings
8.3.1	3

Files with findings

2 distinct paths — top paths by unique finding count:

js/background-bundle.js2
popup.html1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	high	popup.html (line 172)	The popup UI loads `js/popup-bundle.js`, but this file is entirely absent from the extracted extension package. Missing JavaScript bundles that are referenced by entry-point HTML are a strong indicator of a file that …	8.3.1
2	Unauthorized Data Collection	high	js/background-bundle.js (line 990)	A simple countdown timer has no legitimate need for the `system.cpu` permission or platform fingerprinting. At background page startup, this code unconditionally harvests CPU architecture, CPU model name, OS platform,…	8.3.1
3	Tracking	medium	js/background-bundle.js (line 975)	The background page captures the extension's own runtime ID (`chrome.runtime.id`) and the full manifest object immediately on load, then proceeds to enumerate CPU and platform details. Collecting the extension ID alon…	8.3.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

187

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
chrome.google.com	/webstore/detail/1-click-timer/igloknlllonknnbkfgggfkigmeegmakf/support	https://chrome.google.com/webstore/detail/1-click-timer/igloknlllonknnbkfgggfkigmeegmakf/support
chrome.google.com	/webstore/detail/1-click-timer/igloknlllonknnbkfgggfkigmeegmakf/reviews	https://chrome.google.com/webstore/detail/1-click-timer/igloknlllonknnbkfgggfkigmeegmakf/reviews
twitter.com	/home	https://twitter.com/home?status=Checkout%201-click%20timer:%20goo.gl/Mvqy53%20by%20%40alexewerlof
www.facebook.com	/sharer/sharer.php	https://www.facebook.com/sharer/sharer.php?u=https://chrome.google.com/webstore/detail/1-click-timer/igloknlllonknnbkfgggfkigmeegmakf
plus.google.com	/share	https://plus.google.com/share?url=https://chrome.google.com/webstore/detail/1-click-timer/igloknlllonknnbkfgggfkigmeegmakf
www.userpixel.com	-	https://www.userpixel.com
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xmp/1.0/DynamicMedia/	http://ns.adobe.com/xmp/1.0/DynamicMedia/
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/

Showing 1 to 10 of 190 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


15.4.4.18	IPv4	-

4.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Simple and good locking. Make an app for phones too.

George Zournatzoglou·14 Apr 2021

I liked your app so much. But It will be great if its worked as loop. I work in pc 25minutes and take rest for 5 minutes for walking. I had to setup the time again n again i dont like this thing. so please make auto that give break after a specific time and then start again.

Provakor Konik·7 Apr 2021

Beau, simple, hyper pratique, bref parfait !

Franck Lebrun·

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

1-click-timer

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version3

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews