Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Assessment Mode

CRITICAL RISKRemoved from Chrome Web Store

Assessment Mode

ID: lojeahlfbkkiopgolmojagpemoflmkhn

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

0.2.3

Size

0.03 MB

Rating

1.3/5

Reviews

Users

200,000

Type

Extension

Updated

Dec 9, 2022

Publisher Contextual Analysis

Author: Summit LearningView Profile
Privacy: Privacy Policy
Help: Help Center
Country: US
MX records exist: No
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: No
Address: 801 Jefferson Ave Redwood City, CA 94063 US

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

200,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Prevents students from switching to another window or tab while taking content assessments

The Assessment Mode tool is a Chrome extension that helps prevent students from opening other browser windows while taking content assessments (note that there are workarounds to bypass this mode, so teachers should monitor students as they normally would during assessments). To enable Assessment Mode at your school, install the Assessment Mode Chrome Extension on all student computers. Once the extension has been installed to all devices, submit a help desk ticket for us to enable the feature.

User Growth

Showing data from Jan 17, 2024 to Jan 15, 2025

Versions

-33.33%(-100,000 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 81 ratings

Average Rating

Current: 1.28 / 5.0+0.04

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium2

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.2.3 Code review	4

Extension Version	Code Review Findings
0.2.3	4

Files with findings

2 distinct paths — top paths by unique finding count:

service-worker.js3
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	high	manifest.json (line 20)	The externally_connectable manifest key grants any page on https://.czedi.com/ the ability to send runtime messages to this extension. czedi.com is an undisclosed third-party domain with no visible relationship to t…	0.2.3
2	Privilege Escalation	high	service-worker.js (line 2)	The onMessageExternal handler's authorization check is `!i.id \|\| e.id === i.id`: when no assessment ID has been stored yet (fresh install or after a reset), the first caller from ANY domain listed in externally_connec…	0.2.3
3	Tracking	medium	service-worker.js (line 2)	When assessment mode is active, the extension runs a 400ms setInterval loop plus five persistent event listeners that monitor every tab activation, window focus change, tab attach/detach, and tab removal event across …	0.2.3
4	Unauthorized Data Collection	medium	service-worker.js (line 2)	The Sentry SDK is initialized with a self-hosted DSN and patches both XMLHttpRequest (capturing method, URL, status code, and request body) and fetch (capturing method, URL, and response status) for performance instru…	0.2.3

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
localhost	/*	http://localhost/*
127.0.0.1	/*	http://127.0.0.1/*
*.czedi.com	/*	https://.czedi.com/
sentry.summitlearning.org	/21	https://[email protected]/21

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


127.0.0.1	IPv4	-

2.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

tbh, all you need to do is spam esc and open a new tab and switch to it constantly until the extension doesn't switch back to the assessment.

Julian Benedict·21 Sept 2024

Hello, I hope you're having a splendid day! I am currently seeking opportunities to expand my business operations by investing in extensions with a significant user base, beginning from 50,000 users and up. No matter if your extension has a modest user base or counts its users in the millions, I am interested and ready to negotiate a purchase. If you are in possession of such an extension and looking to turn it into a profit, please consider reaching out to me. We can discuss the price and proceed with a transparent and secure transaction through a trusted escrow service based in the United States. It's great that Google allows the transfer of extension ownership between accounts, so your Google account ownership will remain intact. If you have any needs, please contact us via the following contacts Whatsapp: +1 (248) 896‑8035 Telegram: t.me/harryysandersonn

Abner Wirtz·7 Jun 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Assessment Mode

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating