Security Warning: High Security Risk

Automated analysis found severe security findings in this version. Review the Security Analysis tab before trusting this extension.Extension: Appsheet Translate

HIGH RISK

Appsheet Translate

Name: Appsheet Translate
Rating: 5 (11 reviews)

ID: beenkcmmckdpbfbdaegofdokmkiciigl

Extension Info & Metadata

Status

Active

Version

1.0

Size

0.05 MB

Rating

5.0/5

Reviews

Users

10,000

Type

Extension

Updated

Oct 3, 2022

Publisher Contextual Analysis

Trusted

Author: https://aiassistant.online/View Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

10,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Translate appsheet.com to any language

Boost productivity and clear the clutter Full translation of the Appsheet interface into one of the languages of more than 100 languages of the world. Adaptation of the Appsheet interface to the translation text. Translation of errors, Appsheet hints during application development. 1.Download and run the Appsheet Translate extension 2.Disable automatic Google Translator 3.Select the translation language

User Growth

Showing data from Oct 04, 2022 to Oct 03, 2023

Versions

+66.67%(+4,000 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 10 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium3

Low1

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0 Code review	6

Extension Version	Code Review Findings
1.0	6

Files with findings

4 distinct paths — top paths by unique finding count:

content.js2
manifest.json2
popup.js1
widget/widget.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	manifest.json (line 39)	A keyboard command is explicitly named 'inject-script' with description 'Inject a script on the page'. While the current handler in popup.js only sends a benign message, the command registration and description strong…	1.0
2	Unauthorized Data Collection	high	content.js (line 238)	The extension reads live values from all non-hidden input elements on AppSheet pages and sends them to the external translate.google.rs endpoint. AppSheet is a business application builder that often handles sensitive…	1.0
3	Code Injection	medium	content.js (line 388)	The content script registers a message listener that logs all incoming messages and unconditionally returns true (keeping the message channel open). This is a dormant listener that accepts arbitrary messages from the …	1.0
4	Data Exfiltration	medium	popup.js (line 1)	All page content—including scraped input field values—is sent to translate.google.rs (Google Serbia's TLD) rather than the standard official Google Translate API endpoint translate.googleapis.com. The spoofed Windows …	1.0
5	Other	medium	manifest.json (line 35)	The background service worker popup.js is declared as a web-accessible resource matching all URLs. This means any webpage can read the extension's service worker source code via chrome-extension://<id>/popup.js, poten…	1.0
6	Code Injection	low	widget/widget.js (line 1)	The widget fetches its HTML content as raw text and injects it directly into the page body via insertAdjacentHTML. While the current widget.html content appears static, if the extension were updated to serve dynamic o…	1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
translate.google.rs	/translate_a/single	https://translate.google.rs/translate_a/single
www.appsheet.com	/*	https://www.appsheet.com/*
t.me	/AppSheet_RU	https://t.me/AppSheet_RU
www.youtube.com	/channel/UCNw2wZlCGE02hwlXi8pBGVQ	https://www.youtube.com/channel/UCNw2wZlCGE02hwlXi8pBGVQ?sub_confirmation=1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


103.0.0.0	IPv4	-

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

¿Genial!

MaAngeles C, J.·31 Jan 2023

Спасибо огромное разработчику , на много облег��ило работу )))

ВК

Васили�� Кузьмин·23 Jan 2023

Спасибо огромное разработчику , на много облегчило работу )))

ВК

Васили�� Кузьмин·23 Jan 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Warning: High Security Risk

Appsheet Translate

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating