Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Cling Wallet

CRITICAL RISKRemoved from Chrome Web Store

Cling Wallet

ID: kppgpfphbmbcgeglphjnhnhibonmebkn

Could be malicious

Supported Languages

🇰🇷Korean

Extension Info & Metadata

Status

Removed

Version

1.3.6

Size

2.06 MB

Rating

2.2/5

Reviews

Users

7,000

Type

Extension

Updated

Nov 30, 2023

Publisher Contextual Analysis

Author: Carrieverse Co., LtdView Profile
Privacy: Privacy Policy
MX records exist: No
Domain exists: No
Is disposable: No
Is role-based: No
Mailbox exists: No

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

7,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Cling Wallet Project by CarrieVerse

편리한 디지털 자산 관리 내가 관리하고 거래하려는 토큰이 없다면?! 맞춤형 토큰 불러오기 기능을 통해 원하는 토큰을 자유롭게 추가하세요. Cling Wallet에서 모든 자산 관리가 가능해집니다. 하나의 지갑으로 관리하는 NFT 구매한 NFT를 담아서 Cling Wallet에 편하게 보관하고 관리하세요. 여러 지갑을 이용할 필요 없이, Cling Wallet 하나의 지갑으로!! 한 번에!! NFT를 관리할 수 있어요. 블록체인 기반의 지갑 하나의 지갑에서 다양한 이더리움 기반 블록체인 네트워크를 이용해 보세요. Polygon, Ethereum, Avalanche 각각의 네트워크에서 지원하는 다양한 디지털 자산을 자유롭게 관리 및 거래하세요. 신속하고 원활한 서비스 환경 Cling Wallet에서는 대규모 트랜잭션을 즉각적으로 원활하게 처리할 수 있는 환경을 제공합니다. 편리하고 보안이 강화된 회원가입 사용자 편의성을 높인 간편한 회원가입 과정! 이미 있는 SNS 계정으로 보다 쉽고 편리하게 지갑을 만들어 보세요. 게다가 블록체인 기반 전자신분증시스템 (Decentralized Identifiers, DID) 기술이 적용되어 사용자 신원증명을 보다 더 안전하게 관리합니다. 보다 빠른 고객 지원 Cling Wallet이 있으면, 문의사항 응대도 보다 빠르게! 앱(App)의 고객지원 센터([email protected])로 연락해 주시기 바랍니다.

User Growth

Showing data from Jan 19, 2023 to Jan 18, 2024

Versions

-22.22%(-2,000 users)

Compared to 3 months ago

14 versions released in this period

Rating Count

Total: 9 ratings+3 (50%)

Average Rating

Current: 3.11 / 5.0+3.11

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium2

Low0

Versions scanned

Showing 1 of 14 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.3.2 Code review	4

Extension Version	Code Review Findings
1.3.2	4

Files with findings

2 distinct paths — top paths by unique finding count:

content.js3
inject.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	inject.js (line 1)	The content script (run_at document_start, matches <all_urls>) explicitly skips any host whose name contains 'google' and only injects content.js on every other domain. Domain-conditional injection that exempts a majo…	1.3.2
2	Credential Theft	high	content.js (line 130)	On every non-Google page, the script overwrites window.ethereum — even when MetaMask is already present it replaces the global ethereum reference with a Cling-controlled provider and only stashes the original in a pro…	1.3.2
3	Privilege Escalation	medium	content.js (line 9)	Combined with the manifest's externally_connectable matches:['<all_urls>'], the page-context script can use chrome.runtime.connect/sendMessage with the extension ID to talk to the privileged background service worker …	1.3.2
4	Unauthorized Data Collection	medium	content.js (line 75)	Every wallet RPC request to the background ships the page's hostname, document title, and favicon URL to the extension. While typical for wallets to display origin context on prompts, here it is sent for every send()/…	1.3.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


*	/*	http:///
*	/*	https:///
www.apache.org	/licenses/LICENSE-2.0	http://www.apache.org/licenses/LICENSE-2.0
localhost	-	http://localhost
apis.google.com	/js/api.js	https://apis.google.com/js/api.js?onload=${c}`
${n.config.authdomain}	/$%7BvA%7D%60,r=%7BapiKey:e.apiKey,appName:n.name,v:f0%7D,i=wA.get(n.config.apiHost	https://${n.config.authDomain}/${vA}`,r={apiKey:e.apiKey,appName:n.name,v:f0},i=wA.get(n.config.apiHost
${n.authdomain}	/$%7BMA%7D%60%7D/**	https://${n.authDomain}/${MA}`}/**
${i}`	-	http://${i}`
github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
lodash.com	-	https://lodash.com/

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

1.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

수시로 시드문구 입력해야함 탈취우려있음

YR Choi·1 Jun 2024

수시로 시드문구 입력해야함 탈취우려��음

YR Choi·1 Jun 2024

Horrível, não detecta a wallet no site de swap.

SrBB·11 May 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Cling Wallet

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 14 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating