Extension Auditor
Extension Auditor
Sign Up

Bookmark New Tab

ID: ojnmikfgneagcllgoncbmkepdcfhdmpb

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Removed
Version
1.0.0.3
Size
2.36 MB
Rating
0.0/5
Reviews
0
Users
5,336
Type
Extension
Updated
Jan 2, 2023
Category
7_productivity
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Author
bookmarkextnewView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
5,336

New tab to manage the bookmarks. You can easily access the bookmarks, bing search & time.

You can easily the open bookmarks from new tab. You can easily access the bookmarks, Bing search & time from the Home Tab. By clicking "Add to Chrome", you accept and agree to installing Globe Earth New Tab extension and setting Chromeâ„¢ new tab to that provided by the service and the Terms of Use and Privacy Policy. The extension will update your search settings and will change your search engine to be powered by Bing. Privacy Policy: https://www.bookmark-tab.com/privacy.html Terms of Use:https://www.bookmark-tab.com/eula.html Contact us: https://www.bookmark-tab.com/contact-us.html About us: https://www.bookmark-tab.com/#about

Item
Type
Severity
Description
bookmarks
Permission
Low
This permission manages browser bookmarks and folders. Rated Low because it can only modify bookmark data, which is not sensitive and changes are visible to users.

By severity

Critical0
High1
Medium1
Low1

Versions scanned

Showing 1 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
1.0.0.23

Files with findings

2 distinct paths — top paths by unique finding count:

  • js/readbookmarks.js2
  • css/popup.css1
S.No.
Category
Severity
File
Summary
Found in Version
1Unauthorized Data Collection
high
js/readbookmarks.js (line 3)Every bookmark URL is sent to Google's favicon service at s2.googleusercontent.com as a query parameter (`domain=${bookmarkItem.url}`). This leaks the user's full bookmark URL list to an external Google server on ever…
1.0.0.2
2Code Injection
medium
js/readbookmarks.js (line 3)Bookmark URLs and titles are interpolated directly into an HTML string via template literals and then inserted into the DOM with jQuery `.append()`. If any bookmark URL or title contains malicious HTML (e.g., from a c…
1.0.0.2
3Tracking
low
css/popup.css (line 1)The stylesheet imports a font directly from Google Fonts via an external network request. Every time the new-tab page loads, the user's IP address and browser fingerprint are sent to Google's CDN. Combined with the fa…
1.0.0.2
URLs
21
IPv4
1
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
getbootstrap.com-https://getbootstrap.com/
github.com/twbs/bootstrap/blob/main/LICENSEhttps://github.com/twbs/bootstrap/blob/main/LICENSE
www.w3.org/2000/svghttp://www.w3.org/2000/svg
fonts.googleapis.com/css2https://fonts.googleapis.com/css2?family=Roboto:wght@100&display=swap
www.iec.chiec-http://www.iec.chIEC
www.iec.chdesc.iec-http://www.iec.chdesc.IEC
github.com/twbs/bootstrap/graphs/contributorshttps://github.com/twbs/bootstrap/graphs/contributors
popper.js.org-https://popper.js.org
momentjs.com/guides/http://momentjs.com/guides/#/warnings/define-locale/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/js-date/
Showing 1 to 10 of 30 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
1.0.0.3
IPv4
-
Version
Size
Is Malicious
Findings
Permhash
1.0.0.2
Latest
2.36 MB
Malicious
3
37d15b9571f56ffbb7494a02efdebc7390f796c20ea0c477229e1711c86a90be
1.0.0.1
2.36 MB
Malicious
—
37d15b9571f56ffbb7494a02efdebc7390f796c20ea0c477229e1711c86a90be
1.0.0.3
2.36 MB
Malicious
—
37d15b9571f56ffbb7494a02efdebc7390f796c20ea0c477229e1711c86a90be
Showing 1 to 3 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In