Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: CLEAN crxMouse Gestures

CRITICAL RISKRemoved from Chrome Web Store

CLEAN crxMouse Gestures

ID: mjidkpedjlfnanainpdfnedkdlacidla

Could be malicious

Supported Languages

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇺🇸English

🇫🇷French

🇯🇵Japanese

Extension Info & Metadata

Status

Removed

Version

4.2.0

Size

0.12 MB

Rating

4.5/5

Reviews

563

Users

91,601

Type

Extension

Updated

Jan 29, 2023

Publisher Contextual Analysis

Trusted

Author: JeffreyView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

100,551

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

CLEAN Version! Boost browsing productivity with your fingertips - Mouse Gestures, Super Drag, Wheel Gestures, Rocker Gestures.

CLEAN Version! Based on crxMouse Gestures, Modified and optimized the code. MOST Importrant! Removed the code of background urls uploading. Convenient, fast and fully exploit the mouse all operating features include: mouse gestures, super drag, wheel gestures, rocker gestures, smooth scrolling, tab lists, force background tab. Change log: V4.2.0: Support more sites with dragging image to open link, Youtube, Bilibili etc. V4.1.8: Using optional permissions mechanism to get back Add to bookmarks, open url from clipboard, you need to re-add gesture or click save button to trigger permission prompt. V4.1.5: Add gesture to disable context menu. Add new image download methods. Fix run custom script. V4.1.3: Fix reopen closed page/fullscreen/background open tab. V4.1.2: Fix background open tab, fix mouse wheel smooth scroll. V4.1.0: Remove permission: tabs, clipboardRead, clipboardWrite, bookmarks,may loss some functions rarely used:capture page, open url from clipboard, add to bookmark. Copy to clipboard is not affected. Fix bugs related to upgrade manifest to V3. V4.0.2: Fix import config file error, fix google search by image. V4.0.0: Update extension to Manifest V3, fix some bugs, enhance performance. V3.4.4: Fix drag text/link/pic not opening in background. V3.4.3: Add search engine DuckDuckGo, fix drag text with '&' cause imcomplete searching text. V3.4.1: Fix track color setting failure. V3.4.0: Fix gesture failure in some websites, csdn etc. V3.3.0: Add force background tab. Fix gesture track deviation. V3.2.0: Update selection & drag to search & open link strategy. V3.1.1: Fixed Drag-Image (Save image). Detele jQuery file, optimized extension package size.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+0.81%(+733 users)

Compared to 3 months ago

3 versions released in this period

Rating Count

Total: 491 ratings+1 (0%)

Average Rating

Current: 4.58 / 5.0+0.01

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium2

Low3

Versions scanned

Showing 1 of 12 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
4.0.0 Code review	6

Extension Version	Code Review Findings
4.0.0	6

Files with findings

5 distinct paths — top paths by unique finding count:

js/color.js2
js/background.js1
js/event.js1
js/options.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	js/event.js (line 1444)	The content script evaluates arbitrary JavaScript stored in the extension's config (moreScript) via eval() whenever a user performs a gesture mapped to the 'G_userscript' action. Although this is a documented user-scr…	4.0.0
2	Privilege Escalation	medium	js/background.js (line 540)	On first install the service worker calls the MV2-only chrome.tabs.executeScript to inject js/event.js into every frame of every open tab (http/https + chrome:// pages attempted). Under Manifest V3 this API does not e…	4.0.0
3	Privilege Escalation	medium	manifest.json (line 7)	event.js runs at document_start in all frames of every http/https URL and holds clipboardRead/clipboardWrite plus full host permissions. Combined with the eval of user-supplied moreScript and the MV2-era executeScript…	4.0.0
4	Code Injection	low	js/color.js (line 74)	The bundled jscolor library parses attribute-embedded object literals with eval(). The only inputs are the extension's own options.html class attributes, so exploitation requires control of the extension package itsel…	4.0.0
5	Code Injection	low	js/color.js (line 970)	Second eval() in jscolor evaluates a string-typed onImmediateChange callback. Same limited risk profile as the bind() eval — inputs come from the extension's own option page configuration of jscolor, but it is dead-we…	4.0.0
6	Tracking	low	js/options.js (line 1855)	The options page still contains a Google Analytics _gaq.push call, a vestige of the pre-'CLEAN' crxMouse build. _gaq is never defined or loaded in this bundle so the call errors silently, but the residual tracking stu…	4.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


chrome.google.com	/webstore/detail/mjidkpedjlfnanainpdfnedkdlacidla	https://chrome.google.com/webstore/detail/mjidkpedjlfnanainpdfnedkdlacidla
accounts.google.com	/ServiceLogin	https://accounts.google.com/ServiceLogin?service=chromiumsync\
ss-o.net	-	http://ss-o.net/
chrome.google.com	/extensions/detail/jpkfjicglakibpenojifdiepckckakgk	https://chrome.google.com/extensions/detail/jpkfjicglakibpenojifdiepckckakgk
looxu.blogspot.com	-	http://looxu.blogspot.com/
github.com	/ArcCosine/userscript/blob/master/simple_guestures.user.js	https://github.com/ArcCosine/userscript/blob/master/simple_guestures.user.js
odvarko.cz	-	http://odvarko.cz
jscolor.com	-	http://jscolor.com
twitter.com	/Cqoicebordel	https://twitter.com/Cqoicebordel
blog.sina.com.cn	/u/1773846677	http://blog.sina.com.cn/u/1773846677

Showing 1 to 10 of 40 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

I really want to use this instead of the original CRX, but without a blacklist, I just can't. I work in Onshape (online CAD software) daily, and need the right mouse for rotating the camera. I use some other online apps that need the right mouse drag, too, for other things, including some games. The CRX blacklist doesn't work anymore, either, so I had to stop using that extension, too. If this one got a working blacklist, it would be ahead of the original!

Gary Fixler·5 Feb 2024

比原版好用，支持后台打开标签页

杨

杨家僖·26 Jan 2024

比原版好用，支持后台��开标签页

杨

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

CLEAN crxMouse Gestures

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 12 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating