Security Alert: Confirmed Malware
Audio Equalizer
ID: aemjbieioebobglekneinkpijacjiohn
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- DevAppView Profile
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
Audio Equalizer with the function of bass booster and with the settings of musical genres. Make the sound better!
Powerful and easy to use, classic audio equalizer with presets of music genres and Bass Booster function. Audio Equalizer allows improving the sound quality of your Chrome browser to get more pleasure from listening to music and watching videos. Extension includes: - Equalizer for 10 bands; - Audio Volume Control - to set the desired volume level; - Volume Booster - a significant increase in volume from the standard sound power; - Bass Booster preset - sound effect to enhance the bass sound; - Preset Vocal Booster - amplification of high frequencies of the sound; Audio equalizer will help you adjust the levels of sound effects, with which you can make the most of your speakers and headphones. Try to use this equalizer and get pleasure from its use. Get maximum pleasure from listening to music and watching videos online, using Audio Equalizer!
The extension writes the current tab title directly into the privileged popup DOM with `html()`. Because page titles are attacker-controlled, a malicious site could supply HTML markup and potentially trigger DOM-based code injection inside the extension UI, which is significantly more dangerous than a normal webpage XSS.
1124 $("#editInBackground")1125 .on("click", function() { 1126 chrome.tabs.get(Number(Core.load('id')), function(a) { 1127 Popup.showModules(); 1128 $("#title") 1129 .html(a.title); 1130 1131 1132 Popup.advancedInit(); 1133 monoHandler.init() 1134 })The manifest explicitly enables `'unsafe-eval'` in the extension CSP, which weakens one of Chrome's main defenses against injected script execution. No direct `eval()` call was found in the first-party code reviewed, but this setting materially increases the impact of any DOM injection bug in the popup or background pages.
1 { 2 "author": "ExtToolsCmp", 3 "background": { 4 "scripts": ["js/core.js", "libs/jquery.js", "libs/jungle.js", "js/background.js"] 5 }, 6 "browser_action": { 7 "default_icon": { 8 "128": "assets/icons/128.png", 9 "256": "assets/icons/256.png", 10 "64": "assets/icons/64.png" 11 }, 12 "default_popup": "index.html", 13 "default_title": "__MSG_default_title__" 14 }, 15 "content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'", 16 "default_locale": "en", 17 "description": "__MSG_description__", 18 "icons": { 19 "128": "assets/icons/128.png", 20 "256": "assets/icons/256.png", 21 "64": "assets/icons/64.png" 22 }, 23 "manifest_version": 2, 24 "name": "__MSG_name__",The background page exposes a persistent `uid` over runtime messages and keeps request counters (`count`, `valid`) around that identifier. Elsewhere in the extension, this `uid` is generated once and stored persistently, which is a classic tracking primitive even though no explicit exfiltration endpoint is present in this package.
488 class Background { 489 InitListener() { 490 chrome.runtime.onMessage.addListener(function(obj, sender, sendResponse) { 491 if (obj.method && obj.method == "getUid") { 492 if (Core.load("count")) { 493 let co = Core.load("count"); 494 let count = parseInt(co); 495 count++; 496 Core.save('count', count); 497 if (count > 100) { 498 Core.save('valid', 1) 499 } 500 } else { 501 Core.save('count', 1); 502 } 503 return sendResponse({ 504 uid: Core.load('uid') 505 });By severity
Versions scanned
Showing 2 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| 1.0.8 | 3 |
| 1.0.7 | 5 |
Files with findings
4 distinct paths — top paths by unique finding count:
- js/background.js3
- manifest.json2
- popup.js2
- js/core.js1
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Code Diff
Compare extension code between any two versions.
No comparable text files found between these versions.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.