Extension Auditor
Extension Auditor
Sign Up

bmbox

ID: icnbeigfklbpfaplgochmfimkfjbkpej

Could be malicious

Supported Languages

🇨🇳Chinese (Simplified)

Extension Info & Metadata

Status
Removed
Version
1.0.0
Size
0.30 MB
Rating
5.0/5
Reviews
2
Users
8
Type
Extension
Updated
Dec 30, 2019
Category
7_productivity
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
zhangyw001View Profile
Privacy
Privacy Policy
Country
CN
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
北七家镇 宏福苑 东城区, 北京市 100000 CN
Total Extensions
4
Active
2
Obsolete
2
Listed
4
Unlisted
0
Total Users
296

bmbox 书签管理器

基于chrome插件管理的，美观大方的书签插件

Item
Type
Severity
Description
<all_urls>
Permission
Critical
This permission grants access to all websites without restriction. Rated High because it can access any web content, monitor all web activity, and potentially steal sensitive data across all sites.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
declarativeContent
Permission
Medium
This permission controls extension activation based on page content. Rated Medium because it can monitor page content matches and selectively activate extension features.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
bookmarks
Permission
Low
This permission manages browser bookmarks and folders. Rated Low because it can only modify bookmark data, which is not sensitive and changes are visible to users.
URLs
100
IPv4
4
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
mozilla.org/MPL/2.0/http://mozilla.org/MPL/2.0/.
developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessagehttps://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
github.com/mozilla/webextension-polyfill/issues/130https://github.com/mozilla/webextension-polyfill/issues/130
tools.ietf.org/html/rfc6455https://tools.ietf.org/html/rfc6455#section-7.4.1
tc39.github.io/ecma262/https://tc39.github.io/ecma262/#sec-advancestringindex\nmodule.exports
tc39.github.io/ecma262/https://tc39.github.io/ecma262/#sec-array.prototype.includes\n
tc39.github.io/ecma262/https://tc39.github.io/ecma262/#sec-array.prototype.indexof\n
stackoverflow.com/questions/6024666/getting-ie-to-replace-a-regex-with-the-literal-string-0/nvarhttps://stackoverflow.com/questions/6024666/getting-ie-to-replace-a-regex-with-the-literal-string-0\nvar
github.com/zloirock/core-js/issues/306/nhttps://github.com/zloirock/core-js/issues/306\n
github.com/zloirock/core-js/issues/86https://github.com/zloirock/core-js/issues/86#issuecomment-115759028\nmodule.exports
Showing 1 to 10 of 100 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
21.2.5.8
IPv4
-
21.2.5.11
IPv4
-
21.2.5.6
IPv4
-
21.2.5.9
IPv4
-
Version
Size
Is Malicious
Findings
Permhash
1.0.0
Latest
0.30 MB
Malicious
—
e54a031ee6334ae0a74ee454801bdc69204e7430c65cdbf43d71d4c41e6594ed
Showing 1 to 1 of 10 rows
Rows per page:

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In