Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Auto Refresher

CRITICAL RISKRemoved from Chrome Web Store

Auto Refresher

ID: nngejcmlgmalflneljigalajfiblfgmn

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

3.1.1

Size

0.13 MB

Rating

4.7/5

Reviews

129

Users

205,141

Type

Extension

Updated

Jun 21, 2021

Publisher Contextual Analysis

Author: David IgnatView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

205,141

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Reload pages periodically

Don’t refresh the page frantically while waiting for an important update. Autorefresher can refresh the page for you periodically. How it works: 1. Click on icon in extension toolbar / menu 2. Optionally you can pin the icon 3. Enter update interval in seconds 4. Press the Start button ▶️ Also, you can 1. Clear all automatic refreshes that you set up 2. Pause refreshes with on/off button in the right-top corner of the popup Also, we suppress page alerts like “Do you want to reload this site”.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium2

Low4

Versions scanned

Showing 2 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.1.0 Code review	3
3.0.7 Code review	5

Extension Version	Code Review Findings
3.1.0	3
3.0.7	5

Files with findings

5 distinct paths — top paths by unique finding count:

common.js2
popup/popup.html2
popup/popup.js2
chrome.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	common.js (line 26)	On every refresh cycle the extension injects `dis_alerts.js` into the active web page via `chrome.tabs.executeScript`, which is gated only by a synced `stat` flag (default: not false → true). Combined with the `<all_u…	3.0.7
2	Code Injection	high	popup/popup.js (line 193)	The raw `tab.url` value from every open browser tab is concatenated directly into an HTML string and passed to jQuery's `.append()` without any sanitization or encoding. A malicious or attacker-controlled page URL con…	3.0.7
3	Code Injection	medium	chrome.js (line 3)	The background page reads ALL local storage at once via `chrome.storage.local.get(null, ...)` — passing `null` returns every key stored. Only after dumping the full storage contents into memory does it dynamically inj…	3.0.7
4	Remote Code Loading	medium	popup/popup.html (line 3)	The popup fetches CSS from three external CDNs (cdnjs.cloudflare.com, fonts.googleapis.com, stackpath.bootstrapcdn.com) on every popup open. These outbound requests fingerprint the user's IP and browser, creating a co…	3.0.7
5	Code Injection	low	common.js (line 38)	The extension injects a script into arbitrary tabs before reloading them. In this package `dis_alerts.js` is empty, so there is no active payload, but `chrome.tabs.executeScript` combined with `<all_urls>` is still a …	3.1.0
6	Other	low	popup/popup.js (line 82)	The developer's own domain `mybrowseraddon.com` is hardcoded as an early-exit exception: if the active tab is on this domain and a refresh interval is set, the function silently returns without performing any action o…	3.0.7
7	Remote Code Loading	low	manifest.json (line 1)	The manifest explicitly whitelists remote script origins for Google Analytics, Google APIs, and Google Tag Manager. No corresponding analytics code was found in the reviewed source, so this broad CSP exception appears…	3.1.0
8	Tracking	low	popup/popup.html (line 9)	The popup loads third-party CSS and fonts directly from remote CDNs each time the extension UI opens. That is unnecessary for a simple refresher tool and creates an external network beacon that can expose user IP, tim…	3.1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.google-analytics.com;	-	https://www.google-analytics.com;
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license
github.com	/whatwg/html/issues/2369	https://github.com/whatwg/html/issues/2369
html.spec.whatwg.org	-	https://html.spec.whatwg.org/#nonce-attributes
js.foundation	-	https://js.foundation/
jsperf.com	/thor-indexof-vs-for/5	https://jsperf.com/thor-indexof-vs-for/5
www.w3.org	/TR/css3-selectors/	http://www.w3.org/TR/css3-selectors/#whitespace

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-

3.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

it does what its supposed to do!

130goude·22 Jun 2021

Too bad an extension

Sebastian R·18 Jun 2021

It works with what I am looking for, I just need to see a timer at the pinned extension and everything will be perfect!

Ivan Antonio·18 Jun 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Auto Refresher

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews