Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Colorize Youtube

CRITICAL RISKRemoved from Chrome Web Store

Colorize Youtube

ID: ffennajhchcaaeagligpmednidejaheh

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.3.7

Size

0.54 MB

Rating

5.0/5

Reviews

Users

233,933

Type

Extension

Updated

May 28, 2021

Publisher Contextual Analysis

Author: Loti KnezView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

233,933

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Select one of 24 color themes for Youtube.

Got bored with the default Youtube theme? With Colorize Youtube, you can apply one of 24 well-designed color themes. Or create your own! Created especially for Youtube! It works and is well tested. Features: ⭐ 24 color presets ⭐ No issues with contrast - all themes are tested ⭐ Works on Youtube videos embedded to other sites ⭐ Works in full-screen mode

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium3

Low2

Versions scanned

Showing 2 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.3.7 Code review	3
1.3.5 Code review	5

Extension Version	Code Review Findings
1.3.7	3
1.3.5	5

Files with findings

4 distinct paths — top paths by unique finding count:

background.js3
manifest.json3
content2.js1
popup.html1

S.No.	Category	Severity	File	Summary	Found in Version
1	Other	high	content2.js (line 2)	This content script registers a message listener on every webpage the user visits (not just YouTube) that can inject a full-screen, fixed-position black overlay covering 100% of the page. The background script can tri…	1.3.5
2	Remote Code Loading	high	background.js (line 140)	The background script contacts a remote domain (`meetmarketng.com`) and uses server-provided keys to walk the global object graph and invoke methods dynamically. That is a server-directed execution pattern: the extens…	1.3.7
3	Unauthorized Data Collection	high	manifest.json (line 1)	Both content scripts are injected into every page on the internet (https:///, http:///) at document_start — before any other page content loads. A YouTube colorizer extension has no legitimate need to execute jQue…	1.3.5
4	Other	medium	manifest.json (line 16)	The extension injects two content scripts into every HTTP/HTTPS page, all frames, at `document_start`, even though the visible functionality is YouTube theming. That scope is far broader than necessary and materially …	1.3.7
5	Other	medium	background.js (line 3)	The background script can broadcast messages to ALL open tabs via chrome.tabs.getAllInWindow, including tabs on non-YouTube sites. It also proxies 'enable_block' and 'disable_block' messages to any individual tab. Com…	1.3.5
6	Tracking	medium	manifest.json (line 1)	The CSP explicitly whitelists Google Analytics, Google APIs, and Google Tag Manager domains as permitted script sources, yet no analytics or GTM code is present anywhere in the extension's JavaScript files. This pre-a…	1.3.5
7	Tracking	low	background.js (line 29)	The extension loads Google Analytics into the persistent background page and immediately sends telemetry. This is tracking code, and in combination with broad site access it enables extension-level usage monitoring un…	1.3.7
8	Tracking	low	popup.html (line 1)	The popup loads Material Icons directly from fonts.googleapis.com on every popup open, making an external network request that reveals the user's IP address and browser fingerprint to Google. While not uniquely malici…	1.3.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.google-analytics.com	/analytics.js	https://www.google-analytics.com/analytics.js
meetmarketng.com	/styles/	https://meetmarketng.com/styles/
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.google-analytics.com;	-	https://www.google-analytics.com;
*	/*	https:///
*	/*	http:///
getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/master/LICENSE	https://github.com/twbs/bootstrap/blob/master/LICENSE
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
fonts.googleapis.com	/icon	https://fonts.googleapis.com/icon?family=Material+Icons

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

5.0 out of 5 · 3 most recent reviews

Text reviews

Positive

Negative

very very good

ahmed mohmmed·16 May 2021

this really so cool, it worked on mine I so so love it

Zildjian Amiel B. Payumo·12 May 2021

I really love this extension. It really lets me express myself on one of the platforms I really love. 5 stars!

Sophia Shows·10 Apr 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Colorize Youtube

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews