Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Auto Skip Ads

CRITICAL RISKRemoved from Chrome Web Store

Auto Skip Ads

ID: lpcpjnfniblaodlndjjbnfaafehlddnf

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.0.0.86

Size

0.13 MB

Rating

3.0/5

Reviews

Users

6,000

Type

Extension

Updated

Apr 19, 2022

Publisher Contextual Analysis

Author: polaglickView Profile
MX records exist: No
Domain exists: No
Is disposable: No
Is role-based: Yes
Mailbox exists: No

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

6,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Auto Skip Ads is an extension that enables you to skip automatically your unnecessary ads. Automatically skip a commercial while…

Auto Skip Ads is an extension that enables you to skip automatically your unnecessary ads. Automatically skip a commercial while playing videos, track usage time & many more things with our extension. The extension simply gives an answer of how to block ads. If you are tired of waiting for ads to end or clicking on skip buttons over your video, this extension is for you. A simple ad skipper that automate the task of clicking on the skip ad button. Who likes Interruption? No one. Auto Skip Ads works automatically. Just click "Add to Chrome", then visit your favorite streaming platforms and see the ads disappear! Contact us! Show support or leave your comments at: [email protected]. ~~ ♥ Keep in touch! ~~ Visit our site to learn more and get our latest updates and news: → https://www.autoskipads.com/

User Growth

Showing data from Apr 08, 2022 to Jul 27, 2022

Versions

+500%(+5,000 users)

Compared to 3 months ago

3 versions released in this period

Rating Count

Total: 1 ratings

Average Rating

Current: 3.00 / 5.0+3.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High2

Medium2

Low0

Versions scanned

Showing 1 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0.85 Code review	7

Extension Version	Code Review Findings
1.0.0.85	7

Files with findings

2 distinct paths — top paths by unique finding count:

background.js5
content/content.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	background.js (line 1291)	On every alarm tick (every 15 minutes), the extension drains the stored tab hostnames, joins them with semicolons, and transmits them to https://searchit.live/data along with the user's persistent UUID, browser type, …	1.0.0.85
2	Tracking	critical	content/content.js (line 1053)	The content script runs at document_start on every URL (<all_urls>) and probes every page for search query parameters ('q', 'p', 'text'). When a search query is found and a timeout condition is met ('takeoverAvailable…	1.0.0.85
3	Unauthorized Data Collection	critical	background.js (line 1410)	The background service worker registers a chrome.tabs.onUpdated listener that silently harvests the hostname of every tab the user navigates to (excluding about:/chrome: URLs). Each hostname is base64-encoded and stor…	1.0.0.85
4	Obfuscation	high	background.js (line 1303)	Before each beaconing call, the extension enumerates all open browser windows including devtools panels. If it detects an open DevTools window, it sets warning=1 and clears the tabs field (the collected browsing histo…	1.0.0.85
5	Tracking	high	background.js (line 1354)	On first install, the extension immediately beacons to https://searchit.live/ext_install with the user's newly generated persistent UUID, browser type, and extension metadata, then opens a 'thank you' redirect page to…	1.0.0.85
6	Obfuscation	medium	background.js (line 992)	A parameter aliasing map translates verbose internal property names (uuid, tabs, userAgent, warning) into short opaque query string keys ('user', 'bh', 'b', 'dto') used in all outgoing network requests. Notably 'bh' —…	1.0.0.85
7	Obfuscation	medium	content/content.js (line 1024)	On every page load (including at document_start), the content script extracts the current page's hostname, base64-encodes it, and appends it to a base64-encoded array stored under the opaque key 'encoded_tabs' in chro…	1.0.0.85

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


feross.org	-	https://feross.org
feross.org	/opensource	https://feross.org/opensource
bugzilla.mozilla.org	/show_bug.cgi	https://bugzilla.mozilla.org/show_bug.cgi?id=695438
github.com	/feross/buffer/pull/148/nObject.setPrototypeOf(Buffer.prototype,	https://github.com/feross/buffer/pull/148\nObject.setPrototypeOf(Buffer.prototype,
github.com	/feross/buffer/issues/154/nBuffer.prototype._isBuffer	https://github.com/feross/buffer/issues/154\nBuffer.prototype._isBuffer
stackoverflow.com	/a/22747272/680742,	http://stackoverflow.com/a/22747272/680742,
github.com	/feross/buffer/issues/166/nfunction	https://github.com/feross/buffer/issues/166\nfunction
github.com	/feross/buffer/issues/219/nvar	https://github.com/feross/buffer/issues/219\nvar
en.wikipedia.org	/wiki/Base64	https://en.wikipedia.org/wiki/Base64#URL_applications\nrevLookup[
github.com	/beatgammit/base64-js/issues/42/n	https://github.com/beatgammit/base64-js/issues/42\n

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.0.0.86	IPv4	-
13.3.3.7	IPv4	-

3.0 out of 5 · 1 most recent review

Text reviews

Positive

Negative

it was okay bc i had been using it for a while until it stopped working for 1 whole month and then it went back idk if this was supposed to happen or if it was a bug but if you can please fix this. Had this never happened i wouldve given it 5 star. ⭐⭐⭐

Monique McClinton·9 Jun 2022

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Auto Skip Ads

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 3 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating