Chrome Web Store
1Versions
1Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.

What our analysis found

Cisco Jabber Guest, used by 100,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites. It comes from a publisher with 4 extensions and was last updated in April 2018.

Analyst notes

This is the legitimate Cisco Jabber Guest Chrome extension, published by (Cisco Systems). All six JS files are clean, human-readable, and implement exactly what the description states: a bridge between Cisco Jabber Guest web applications and the Cisco Jabber Guest native messaging host (com.cisco.jabberguest) for calling. The bundled manifest matches the published manifest exactly with no discrepancy. The ML model over-fit on broad host permissions (needed so content scripts can activate on any Cisco-integrated web app), the nativeMessaging permission (core functionality), and a single tabs.executeScript call in that is a standard post-install injection pattern. The permhash cluster's 50% malware rate likely reflects copycat extensions sharing this permission footprint, not this extension itself. Publisher reputation is low-risk with zero malicious extensions in their portfolio.

Cisco Jabber Guest

Cisco Jabber Guest Chrome extension security report

ID: jbglbakaieakcdiaiabbihafndhapfki

Supported Languages

🇸🇦Arabic
🇧🇷Brazilian Portuguese
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇬🇷Greek
🇮🇱Hebrew
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇳🇴Norwegian
🇵🇱Polish
🇵🇹Portuguese
🇷🇺Russian
🇪🇸Spanish
🇸🇪Swedish
🇹🇷Turkish

Extension Info & Metadata

Status
Removed
Version
11.1.2.9
Size
0.04 MB
Rating
3.1/5
Reviews
27
Users
100,000
Type
Extension
Updated
Apr 26, 2018
Category
Lifestyle Social
Price
Free
Featured
No
Visibility
Unlisted
Mature
No
By Google
No
Trusted
No
This publisherTrack record
4extensions
2 no longer listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Author
cisco.chromestore
Website
Visit
Extensions
4
Active
2
Obsolete
2
Listed
2
Unlisted
2
Users
158,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2

Install growth

Item
Type
Severity
Description
<all_urls>
Risk Factor
Critical
This permission grants access to all websites without restriction. Rated High because it can access any web content, monitor all web activity, and potentially steal sensitive data across all sites.
nativeMessaging
Permission
High
This permission enables communication with applications installed on your computer. Rated High because it can exchange data with native programs, potentially exposing system-level information and local files.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 15% increase: Older manifest version lacks modern security controls
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
http://*/
Host
Medium
Host permission — access limited to this URL pattern.
https://*/
Host
Medium
Host permission — access limited to this URL pattern.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

About this extension

Enable use of the Cisco Jabber Guest add-on for public-to-business voice and video calls.

Read the publisher’s full description

Enable use of the Cisco Jabber Guest add-on for Chrome from Web applications using Cisco Jabber Guest for public-to-business voice and video calls. Install this extension to enable Cisco Jabber Guest voice and video from within the Cisco Jabber Guest web application or other web applications integrated with Cisco Jabber Guest by business customers and partners of Cisco. Used in conjunction with the Cisco Jabber Guest add-on for Chrome (provided separately by the web app integrated with Jabber Guest, after this extension is installed), this extension enables you to place voice and video calls into Cisco customer businesses using your Chrome browser and call links or buttons provided by such businesses. For support, please use the support mechanism provided by the business providing you access to Cisco Jabber Guest. IMPORTANT NOTICES AND DISCLAIMERS - PLEASE READ END USER LICENSE AGREEMENT Use of this Software is governed by the Cisco End User License Agreement. http://www.cisco.com/go/eula CISCO PRIVACY STATEMENT http://www.cisco.com/web/siteassets/legal/privacy_full.html THIRD PARTY LICENSES AND NOTICES http://www.cisco.com/c/en/us/support/unified-communications/jabber-guest/products-licensing-information-listing.html STRONG ENCRYPTION NOTICE This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance concerning the exporting of these products, please contact us by sending email to export@cisco.com. COPYRIGHT NOTICE Copyright 2018 Cisco Systems, Inc. All Rights Reserved.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
11.1.2.9
Latest
0.04 MBNo malware found0
45efc3274b4150823632a09f7e905c53c9a6c66b9f53417453cc82273421e24e
Showing 1 to 1 of 10 rows
Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.