Extension Auditor
Extension Auditor
Sign Up
Articled Save

Articled Save

ID: jkecbabfdjpicamjflcaaecldeecdfin

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
0.0.7
Size
1.29 MB
Rating
0.0/5
Reviews
0
Users
6
Type
Extension
Updated
Jul 6, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Unlisted
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
articled.appView Profile
Privacy
Privacy Policy
Help
Help Center
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Total Extensions
1
Active
1
Obsolete
0
Listed
0
Unlisted
1
Total Users
6
Screenshot 1

Generate a QR code for saving the current page into Articled on iPhone.

Articled Chrome Extension is used to grab any webpage into the Articled mobile app in just seconds. You can then send these articles to your Kindle with all the ads removed, create a private or public list, share it with anyone. Visit https://articled.net for more information.

Item
Type
Severity
Description
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
identity.email
Permission
High
This permission directly accesses the user's email address. Rated High because it reveals personally identifiable information and can be used for tracking or targeting.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
https://ajax.googleapis.com/
Permission
Unknown
No classification available for this permission.
http://*/*
Permission
Unknown
No classification available for this permission.
https://*/*
Permission
Unknown
No classification available for this permission.

The `identity` and `identity.email` permissions grant access to Chrome OAuth tokens and the user's Google account email, but no code in any script calls `chrome.identity.getAuthToken()` or `chrome.identity.getProfileUserInfo()`. Similarly, `http://*/*` and `https://*/*` wildcard host permissions exceed what a QR-code-from-URL popup requires (only `activeTab` is exercised). These permissions were likely the basis for the confirmed Chrome Web Store `policy_violation` removal and represent a meaningful residual attack surface: a future update could activate the already-declared `identity` scope and the loaded `server.js` API infrastructure (`api.articledapp.com/user`) to silently harvest the user's Google token without any permission prompt, because the permissions are already granted.

manifest.json (Line 21)
{  "permissions": [    "activeTab",    "identity",    "identity.email",    "https://ajax.googleapis.com/",    "http://*/*",    "https://*/*",    "storage"  ]}

By severity

Critical0
High0
Medium1
Low0

Versions scanned

None of the 2 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path — top paths by unique finding count:

  • manifest.json1
S.No.
Category
Severity
File
Summary
Found in Version
1Other
medium
manifest.json (line 21)The `identity` and `identity.email` permissions grant access to Chrome OAuth tokens and the user's Google account email, but no code in any script calls `chrome.identity.getAuthToken()` or `chrome.identity.getProfileU…
0.0.7
URLs
26
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
fonts.googleapis.com/csshttps://fonts.googleapis.com/css?family=Asap:400,900|Noto+Sans
articled.net-https://articled.net
www.d-project.com-http://www.d-project.com/
jeromeetienne.github.com/jquery-qrcode/http://jeromeetienne.github.com/jquery-qrcode/
www.opensource.org/licenses/mit-license.phphttp://www.opensource.org/licenses/mit-license.php
www.denso-wave.com/qrcode/faqpatent-e.htmlhttp://www.denso-wave.com/qrcode/faqpatent-e.html
www.w3.org/2000/svghttp://www.w3.org/2000/svg
www.w3.org/2000/xmlns/http://www.w3.org/2000/xmlns/
www.w3.org/1999/xlinkhttp://www.w3.org/1999/xlink
code.google.com/p/android/issues/detailhttp://code.google.com/p/android/issues/detail?id=5141
Showing 1 to 10 of 30 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
0.1.0
Latest
1.29 MB
Benign
—
12ffb95c4cd43ce36a3fddc39ab28b4418d9d59ea54107620c996086f11310db
0.0.7
0.51 MB
Malicious
1
b80bcd94df64d4c4e8cff44fc4d6002a004332d0f17e55688622f5963401c315
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In