Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Bookmarks Menu

CRITICAL RISKRemoved from Chrome Web Store

Bookmarks Menu

ID: ffmdedmghpoipeldijkdlcckdpempkdi

Could be malicious

Supported Languages

🇪🇸Catalan

🇺🇸English

🇫🇷French

🇩🇪German

🇰🇷Korean

🇷🇺Russian

🇪🇸Spanish

Extension Info & Metadata

Status

Removed

Version

2023.07.25

Size

0.06 MB

Rating

3.9/5

Reviews

1,446

Users

108,703

Type

Extension

Updated

Jul 26, 2023

Publisher Contextual Analysis

Author: Supria SahaView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

108,706

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Chrome extension which shows bookmarks menu. Works with Chrome and Google bookmarks.

The extension shows bookmarks menu. Usage: 1. To open bookmark in current tab click by left mouse button. 2. To open bookmark in new tab: - click by middle mouse button or click by left mouse button with Ctrl key pressed. 3. To open bookmark in new tab and switch to it click by middle mouse button with Shift key pressed. 4. To open bookmark in new window click by left mouse button with Shift key pressed. 5. To open all bookmarks in folder click by middle button on folder. 6. To display context menu click by right mouse button. On options panel you can hide some bookmarks or folders. It might be useful if you use bookmark synchronization between different computers. ================== Update: v2023.07.12 - Add feature to share bookmark links on social networks: Twitter, LinkedIn, Facebook and use facebook api to quickly post links to newsfeed. How to use: In the options page, select the link or folder you want to display. Then click share button to share selected link.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+9.54%(+9,469 users)

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 1,430 ratings

Average Rating

Current: 3.95 / 5.0-0.12

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High2

Medium0

Low0

Versions scanned

Showing 1 of 9 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2023.07.12 Code review	5

Extension Version	Code Review Findings
2023.07.12	5

Files with findings

4 distinct paths — top paths by unique finding count:

app/background/cheklog.js2
app/background/background.js1
app/background/net.js1
app/content-script/index.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	critical	app/background/cheklog.js (line 2)	The background service worker silently fetches an authenticated Facebook composer endpoint and uses regex to scrape the user's Facebook account ID (actorID), CSRF token (fb_dtsg) and the eav anti-CSRF token from the r…	2023.07.12
2	Network Interception	critical	app/background/net.js (line 2)	declarativeNetRequest is used to overwrite the Origin and Referer headers on background-initiated XHR (tabIds: TAB_ID_NONE) to make them appear to originate from facebook.com / m.facebook.com. This is an active CSRF b…	2023.07.12
3	Privilege Escalation	critical	app/background/cheklog.js (line 39)	Using the stolen dtsg/eav tokens, the extension forges a POST to Facebook's mobile feed-publish endpoint with the victim's uid as both target and __user. This impersonates the user to silently publish posts to their F…	2023.07.12
4	Privilege Escalation	high	app/content-script/index.js (line 2)	The content script, injected into facebook.com / twitter.com / linkedin.com, watches for the URL marker '?share-bookmark=true', then programmatically clicks the LinkedIn post-composer trigger and uses execCommand('ins…	2023.07.12
5	Unauthorized Data Collection	high	app/background/background.js (line 18)	The background message router exposes 'isLog' (which triggers Facebook session-token harvesting) and 'onShare' (which forges authenticated post-publish requests using those harvested tokens) to any extension page. It …	2023.07.12

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


twitter.com	/intent/tweet	https://twitter.com/intent/tweet?share-bookmark=true&text=${h(t
www.linkedin.com	/feed/	https://www.linkedin.com/feed/?share-bookmark=true
developer.chrome.com	/docs/extensions/mv3/mv3-migration/	https://developer.chrome.com/docs/extensions/mv3/mv3-migration/#executing-arbitrary-strings
www.facebook.com	-	https://www.facebook.com
m.facebook.com	-	https://m.facebook.com
bookmarksmenu.info	-	https://bookmarksmenu.info
www.facebook.com	/dialog/oauth	https://www.facebook.com/dialog/oauth?client_id=1348564698517390&scope=public_profile&force_confirmation=true&auth_type=rerequest&ref=DeviceAuth&user_code=${t}&state=f33299bec0998c&redirect_uri=https://www.facebook.com/dialog/return/arbiter&display=async`,s={__asyncDialog:
www.facebook.com	/ajax/oauth/device.php	https://www.facebook.com/ajax/oauth/device.php
graph.facebook.com	/v2.6/device/login	https://graph.facebook.com/v2.6/device/login?access_token=1348564698517390\|007c0a9101b9e1c8ffab727666805038&method=post&scope=public_profile
graph.facebook.com	/v14.0/device/login_status	https://graph.facebook.com/v14.0/device/login_status

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.0.0.0	IPv4	-
2.1.0.0	IPv4	-

4.7 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Didn't know exactly what I was looking for, but this works nicely.

Meghan Kassulke·8 Nov 2023

It works exactly as it should.

Issac Browning·7 Nov 2023

finally a bookmark button that works with google toolbar bookmarks.

Rita Chaudhary·7 Nov 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Bookmarks Menu

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 9 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating