Extension Auditor
Extension Auditor
Sign Up
Chanvas

Chanvas

ID: bckffohnnogdhimmbfpikgijmakmngka

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Removed
Version
2.4.6
Size
0.38 MB
Rating
5.0/5
Reviews
3
Users
17
Type
Extension
Updated
Jan 13, 2026
Category
Productivity Education
Price
Paid
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Author
tyb3View Profile
Privacy
Privacy Policy
Country
US
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
235 E 15th St Tempe, AZ 85281 US
Website
Visit
Total Extensions
4
Active
3
Obsolete
1
Listed
4
Unlisted
0
Total Users
50
Screenshot 1

Talk to your Canvas with ChatGPT

"What assignments do I have coming up?" "Summarize my latest government reading" "Calculate my grade for calc III using the weights in the syllabus" Ask any question about your Canvas. Chanvas.

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
https://*.herokuapp.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://generativelanguage.googleapis.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://api.openai.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://dashscope-us.aliyuncs.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://generativelanguage.googleapis.com/*
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
windows
Permission
Unknown
No classification available for this permission.
URLs
35
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
billing.stripe.com/p/login/4gM6oJ2TYfY0bmZgv99oc00https://billing.stripe.com/p/login/4gM6oJ2TYfY0bmZgv99oc00
${domain}/*%60;https://${domain}/*`;
${domain}/%60;https://${domain}/`;
chanvas-server-0b3c34c1ab44.herokuapp.com-https://chanvas-server-0b3c34c1ab44.herokuapp.com
${domain}-https://${domain}/?login_success=1`;
chanvas.com/setuphttp://chanvas.com/setup
fonts.googleapis.com-https://fonts.googleapis.com
fonts.gstatic.com-https://fonts.gstatic.com
fonts.googleapis.com/css2https://fonts.googleapis.com/css2?family=DM+Sans:opsz,[email protected],400;9..40,500;9..40,600;9..40,700&display=swap
canvas.cornell.edu-https://canvas.cornell.edu
Showing 1 to 10 of 40 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
2.4.6
Latest
0.38 MB
Benign
—
9a62eda4cc8715ac38e88b947e45797862afdabd1788ceee46f1dd51865d7005
2.3.10
0.41 MB
Benign
—
9a62eda4cc8715ac38e88b947e45797862afdabd1788ceee46f1dd51865d7005
2.3.6
0.40 MB
Benign
—
9a62eda4cc8715ac38e88b947e45797862afdabd1788ceee46f1dd51865d7005
2.3.3
0.40 MB
Benign
—
9a62eda4cc8715ac38e88b947e45797862afdabd1788ceee46f1dd51865d7005
2.3.1
0.38 MB
Benign
—
9a62eda4cc8715ac38e88b947e45797862afdabd1788ceee46f1dd51865d7005
2.2.6
0.36 MB
Benign
—
f42ba0ec29a4fbb3f3f75cc79988d51d9147d89eaef096a9c850ae8e3ea83b63
2.2.4
0.35 MB
Benign
—
f42ba0ec29a4fbb3f3f75cc79988d51d9147d89eaef096a9c850ae8e3ea83b63
2.1.8
0.35 MB
Benign
—
f42ba0ec29a4fbb3f3f75cc79988d51d9147d89eaef096a9c850ae8e3ea83b63
2.1.6
0.35 MB
Benign
—
f42ba0ec29a4fbb3f3f75cc79988d51d9147d89eaef096a9c850ae8e3ea83b63
2.1.5
0.35 MB
Benign
—
f42ba0ec29a4fbb3f3f75cc79988d51d9147d89eaef096a9c850ae8e3ea83b63
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In