Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Color Picker Plus

CRITICAL RISKRemoved from Chrome Web Store

Color Picker Plus

ID: flpfinegbpkablbeaaphkjcpeghmiiif

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.3.6

Size

1.06 MB

Rating

4.7/5

Reviews

104

Users

237,195

Type

Extension

Updated

Jan 21, 2021

Publisher Contextual Analysis

Author: John RogersView Profile
Privacy: Privacy Policy
Country: GB
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Address: 17 Stanley Road Teddington TW11 8TP GB
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

237,200

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Handy color picker for web designers and developers

Color Picker Plus is a tool that helps you find colors on the pages. Features: ⭐ Eyedropper tool ⭐ Works on any element including images and videos ⭐ Copies HEX to clipboard automatically ⭐ Switch HEX <> RGB HTML formats ⭐ Shows recently selected colors How to use: Use the keyboard shortcut ALT-P Or just click the toolbar icon

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High2

Medium0

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.3.6 Code review	5

Extension Version	Code Review Findings
1.3.6	5

Files with findings

3 distinct paths — top paths by unique finding count:

background.js3
averageColor.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Obfuscation	critical	background.js (line 1)	The code reconstructs the string 'createElement' by calling 'lastElementChild'.substr(4,7) === 'Element', then prepends 'create' — a deliberate obfuscation technique to avoid static string matching. It also reads the …	1.3.6
2	Remote Code Loading	critical	background.js (line 1)	Malicious code injected into the ChromePromise library constructor. It uses heavy string obfuscation (template literals with single-character variables, method name reconstruction via substring) to hide that it dynami…	1.3.6
3	Remote Code Loading	critical	manifest.json (line 1)	The manifest explicitly whitelists https://www.googletagmanager.com in its Content Security Policy, which is not needed for any legitimate color picker functionality and directly enables the injected GTM script loader…	1.3.6
4	Obfuscation	high	background.js (line 1)	The strings 'gtm.start', 'gtm.js', and 'GTM-N67T88S' are all fragmented using template literals with embedded single-character string expressions (e.g. `${"g"}tm.` instead of 'gtm.') specifically to defeat keyword-bas…	1.3.6
5	Unauthorized Data Collection	high	averageColor.js (line 124)	This content script is injected into every page the user visits (<all_urls>) and immediately triggers a full visible-tab screenshot capture (via the background page's chrome.tabs.captureVisibleTab) on every page load.…	1.3.6

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/ssorallen/jquery-scrollstop	https://github.com/ssorallen/jquery-scrollstop
github.com	/jquery/jquery-migrate/blob/master/src/event.js	https://github.com/jquery/jquery-migrate/blob/master/src/event.js#L25
github.com	/jeremymouton/cointipper	https://github.com/jeremymouton/cointipper
www.openjs.com	/scripts/events/keyboard_shortcuts/	http://www.openjs.com/scripts/events/keyboard_shortcuts/
nicolasgallagher.com	/micro-clearfix-hack/	http://nicolasgallagher.com/micro-clearfix-hack/
code.google.com	/p/chromium/issues/detail	https://code.google.com/p/chromium/issues/detail?id=506893
cssfontstack.com	-	http://cssfontstack.com
github.com	/suitcss/components-flex-embed	https://github.com/suitcss/components-flex-embed
snook.ca	/archives/html_and_css/hiding-content-for-accessibility	http://snook.ca/archives/html_and_css/hiding-content-for-accessibility
getbootstrap.com	-	https://getbootstrap.com/

Showing 1 to 10 of 90 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-

3.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

It's a great extension. It makes identifying color codes so easy. I ain't even color blind but its hard to differentiate colors. Different shades, different codes, I gotta discover. Can't find a specific shade, brings discomfort. Cuz we defo ain't no wizards, ain't from Hogwarts. Thus, we use color picker plus to pick color codes. To get work done fast and hit the freakin' roads. Color brings joy in life, its a metaphor. New age, new tech to pick color, no dinosaur.

Siddharth Jung Thapa·25 Apr 2021

Очень ужасно. Крадёте код пикера друг у друга (это я говорю про другие расширения) и мен��ете не��ного ��формление (да, та самая радуга на к��опке). В Chrome не могу нормально на странице найт�� нужный цвет (навожу на нужный объект, координаты ра��познавания см��щ��ны от курсора очень ощутимо). Также не могу во вкладке Recent цвета в��бирать. �� Opera ��емног�� получше работает ра��шир��ие, но также не могу выбирать цвета (Recent). Такие высокие рейт��нги, и за что?

КС

Кактус Садовник·24 Apr 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Color Picker Plus

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews