Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Bionic Reading - Automatic

CRITICAL RISKRemoved from Chrome Web Store

Bionic Reading - Automatic

ID: djffbaipfmmbkodikmnmboahdjlfoofo

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

0.0.1

Size

0.02 MB

Rating

2.8/5

Reviews

Users

6,000

Type

Extension

Updated

May 22, 2022

Publisher Contextual Analysis

Trusted

Author: Walker SelbyView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

6,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

An extension that allows for Automatic Bionic Reading on any webpage

This extension automatically converts webpages to the bionic reading format. If you have any questions or comments, feel free to reach out! This is in early development and improvements, features, and fixes will be soon to come.

User Growth

Showing data from May 22, 2022 to Oct 07, 2022

Versions

+20%(+1,000 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 32 ratings

Average Rating

Current: 2.84 / 5.0+2.84

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium1

Low1

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.0.1 Code review	4

Extension Version	Code Review Findings
0.0.1	4

Files with findings

3 distinct paths — top paths by unique finding count:

src/background.js2
manifest.json1
src/popup/popup.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	src/background.js (line 10)	The background service worker listens to `chrome.tabs.onUpdated` for every tab and automatically injects the `convertToReadableText` function into any active tab that finishes loading when auto-mode is enabled. This m…	0.0.1
2	Privilege Escalation	high	manifest.json (line 12)	The extension declares broad host permissions covering every HTTP and HTTPS URL combined with the `scripting` permission. This grants the extension the ability to programmatically inject code into any website the user…	0.0.1
3	Code Injection	medium	src/background.js (line 30)	The injected function uses `sentence.innerHTML = ...` to replace page content for every `p`, `font`, `span`, `h1`, and `h2` element on the page. While the input originates from `innerText` (which strips HTML), wholesa…	0.0.1
4	Other	low	src/popup/popup.js (line 1)	The popup script immediately creates a new tab every time the popup is opened, with no user interaction required (no button click handler, no DOMContentLoaded guard). This means clicking the extension icon always forc…	0.0.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


fsf.org	-	https://fsf.org/
www.gnu.org	/licenses/	https://www.gnu.org/licenses/
www.gnu.org	/licenses/why-not-lgpl.html	https://www.gnu.org/licenses/why-not-lgpl.html
github.com	/ansh/bionic-reading/	https://github.com/ansh/bionic-reading/
github.com	/walkerselby/bionic-reading.git	https://github.com/walkerselby/bionic-reading.git
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	-	http://*/
*	-	https://*/
developer.chrome.com	/docs/extensions/mv3/options/	https://developer.chrome.com/docs/extensions/mv3/options/

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.3 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

I love the *potential* that this app has! It helps me focus on words so much better than traditional fonts! However, there's still too much conflicting issues I have with it, namely the difficulty of turning it off and on, which I need to do at times because it completely gets rid of or changes icons I need to do my normal work processes. It will become a 5 star rating if/when those issues can be fixed!

Brandi Huesmann·16 Jun 2022

Working, but you must remove all other text based plugins (Grammarly, text to speech, etc). Needs some work, but it does function well for most sites.

Joey Galasso·7 Jun 2022

It works, but it messes with google image as it makes the whole page unreadable

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Bionic Reading - Automatic

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews