Chrome Web Store
7Versions
1Code reviewed

No malware found

In code review

Our reviewer read this extensionโ€™s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.

What our analysis found

ColorPick Eyedropper, used by 1,000,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in October 2025.

The extension's functionality (color picking, zoomed preview, history, palette) fully justifies the requested permissions. All external network requests go to the publisher's own domain () or Google Safe Browsing API, and no data is exfiltrated without explicit user opt-in (e.g., 'shareClors' setting). The system uses bundled local JSON files (currently empty) and does not fetch third-party ad content. The code is unobfuscated and contains no hidden malicious logic. User complaints about intrusive ads likely refer to the built-in watermark feature, which is part of the extension's UI and can be disabled. The ML model's risk score is contradicted by the clean code review, trusted publisher status, and high user ratings.

ColorPick Eyedropper

ColorPick Eyedropper Chrome extension security report

ID: ohcpnigalekghcmgcdcenkpelffpdolg

Supported Languages

๐Ÿ‡ช๐Ÿ‡นAmharic
๐Ÿ‡ธ๐Ÿ‡ฆArabic
๐Ÿ‡ง๐Ÿ‡ฉBengali
๐Ÿ‡ง๐Ÿ‡ฌBulgarian
๐Ÿ‡ช๐Ÿ‡ธCatalan
๐Ÿ‡จ๐Ÿ‡ณChinese (Simplified)
๐Ÿ‡น๐Ÿ‡ผChinese (Traditional)
๐Ÿ‡ญ๐Ÿ‡ทCroatian
๐Ÿ‡จ๐Ÿ‡ฟCzech
๐Ÿ‡ฉ๐Ÿ‡ฐDanish
๐Ÿ‡ณ๐Ÿ‡ฑDutch
๐Ÿ‡บ๐Ÿ‡ธEnglish
๐Ÿ‡ช๐Ÿ‡ชEstonian
๐Ÿ‡ซ๐Ÿ‡ฎFinnish
๐Ÿ‡ซ๐Ÿ‡ทFrench
๐Ÿ‡ฉ๐Ÿ‡ชGerman
๐Ÿ‡ฌ๐Ÿ‡ทGreek
๐Ÿ‡ฎ๐Ÿ‡ณGujarati
๐Ÿ‡ฎ๐Ÿ‡ณHindi
๐Ÿ‡ญ๐Ÿ‡บHungarian
๐Ÿ‡ฎ๐Ÿ‡ฉIndonesian
๐Ÿ‡ฎ๐Ÿ‡นItalian
๐Ÿ‡ฏ๐Ÿ‡ตJapanese
๐Ÿ‡ฎ๐Ÿ‡ณKannada
๐Ÿ‡ฐ๐Ÿ‡ทKorean
๐Ÿ‡ฑ๐Ÿ‡ปLatvian
๐Ÿ‡ฑ๐Ÿ‡นLithuanian
๐Ÿ‡ฒ๐Ÿ‡พMalay
๐Ÿ‡ฎ๐Ÿ‡ณMalayalam
๐Ÿ‡ฎ๐Ÿ‡ณMarathi
๐Ÿ‡ณ๐Ÿ‡ดNorwegian
๐Ÿ‡ฎ๐Ÿ‡ทPersian
๐Ÿ‡ต๐Ÿ‡ฑPolish
๐Ÿ‡ต๐Ÿ‡นPortuguese
๐Ÿ‡ท๐Ÿ‡ดRomanian
๐Ÿ‡ท๐Ÿ‡บRussian
๐Ÿ‡ท๐Ÿ‡ธSerbian
๐Ÿ‡ธ๐Ÿ‡ฐSlovak
๐Ÿ‡ธ๐Ÿ‡ฎSlovenian
๐Ÿ‡ช๐Ÿ‡ธSpanish
๐Ÿ‡ฐ๐Ÿ‡ชSwahili
๐Ÿ‡ธ๐Ÿ‡ชSwedish
๐Ÿ‡ฎ๐Ÿ‡ณTamil
๐Ÿ‡ฎ๐Ÿ‡ณTelugu
๐Ÿ‡น๐Ÿ‡ญThai
๐Ÿ‡น๐Ÿ‡ทTurkish
๐Ÿ‡บ๐Ÿ‡ฆUkrainian
๐Ÿ‡ป๐Ÿ‡ณVietnamese

Extension Info & Metadata

Status
Active
Version
0.0.3.3
Size
1.59 MB
Rating
4.2/5
Reviews
1,234
Users
1,000,000
Type
Extension
Updated
Oct 14, 2025
Category
Developer tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
2extensions
All still listed
Scanned by Extension Auditor โ€” Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
http://vidsbee.com/
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
2
Active
2
Obsolete
0
Listed
2
Unlisted
0
Users
1,000,064

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
clipboardWrite
Permission
High
This permission allows modification of clipboard content. Rated High because it can inject malicious content into the clipboard, modify copied passwords, and manipulate copied data.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:โ€ข 10% increase: Early script execution enables pre-emptive content manipulation
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

About this extension

A zoomed eyedropper & color chooser tool that allows you to select color values from webpages and more.

Read the publisherโ€™s full description

If you feel the need to alert the developer about a bug use the feedback forum instead of writing a review. Note: by default "Attempt to auto copy value to clipboard" disabled. You will be warned during install about a request for clipboardWrite permissions, but this is disabled by default until you enable it in settings because automatically overwriting the clipboard may be annoying. If you do use this setting you can decide whether to auto copy the hex or the rgb css. ColorPick needs permission on all websites so that it is at the ready when you need it. In order to use the tabs API this permission is required. Color pick does not abuse this permission and is highly configurable. You can always review the source code yourself, which is available online here https://github.com/qufighter/ColorPick PRs welcome! Please note that colors are picked from a snapshot of the page that is updated only when you scroll. To take a new snapshot press r or use the re-snap button. Sometimes if you just changed tabs, you may see a snapshot error - this is an intentional security feature. Press R or scroll to correct this, or exit color pick and try again. As with most extensions of this nature, it will not work out of the box on the web store, or on file:// pages. It will work on local file pages only after you "Allow access to file URLs" from the tools->extensions manager. However there is also an alternative feature "snap mode" that uses the active tab permission to take a screenshot anyway, which is then sent to a new tab where permission to run the extension may be granted, however you will have to click the extension icon again on this new tab at present. If you experience an issue, try the following: - Try a new website in a different tab and see if it works there - Try the same website in a new tab and see if that works - Reloading the extension or tab may sometimes be needed If you need to operate on unsupported pages try the desktop app version (mac+pc) at color-pick.com or if you are selecting colors from screenshots, images or photos try the mobile phone/tablet app for IOS and Android - search the store for "ColorPick" (which also includes color based mini games). If you're looking for a quick and easy to use color eye dropper with zoomed drag-able preview for fine tuning you've come to the right place. If you experience any bugs PLEASE report them using the feedback button, I want to fix them if they can be fixed. It has been reported that it may take a few tries before it starts working initially. You may have to refresh the page or re-load the extension. I have personally experienced bugs where mousemove event does not fire, etc, but then when I switch out of chrome and back, it starts working. There is little that can be done to fix this except be patient and try again. Keep in mind that your display's color space matters - if it or chrome is not set to sRGB (and restarted chrome) then some colors set to one value will pick as a different value (as if from a screenshot, which in some cases can have a similar effect). Color Pick attempts to use lossless PNG quality to detect colors. If you experience bugs or distorted snapshot of the page disable this feature to use JPEG quality. If your business is using this extension or the desktop app than you should urge them to purchase the appropriate license. Thank You, Sam ------------------------------------------- This program is a Color Picker, or an Eye Dropper, also a ColorPicker or EyeDroper depending on how you wish to spell it. It also contains webpage region magnification/zoom loupe features. Zoom features may help you to see pixel perfect alignment accuracy during web development adjustments. This extension may someday be supported by URL rewriting affiliate links. This may be disabled from options and is disabled by default. When you uninstall this extension you may be asked to complete a survey - you can disable this survey from options.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
54
IPv4
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Version
Size
Verdict
Findings
Permhash
0.0.3.3
Latest
1.59 MBNo malware found0
d0a55f59910100b4b89417e5c39e160cdb906806102afffdc4a07f2a5dfa7c3b
0.0.3.2
1.62 MBNot scannedโ€”
d0a55f59910100b4b89417e5c39e160cdb906806102afffdc4a07f2a5dfa7c3b
0.0.3.1
1.61 MBNot scannedโ€”
d0a55f59910100b4b89417e5c39e160cdb906806102afffdc4a07f2a5dfa7c3b
0.0.2.37
1.68 MBNot scannedโ€”
abebfb47671dfd26423cca2a24154b74bfa7bff44e543ca36614a4f1c926ee43
0.0.2.36
1.47 MBNot scannedโ€”
abebfb47671dfd26423cca2a24154b74bfa7bff44e543ca36614a4f1c926ee43
0.0.2.34
1.47 MBNot scannedโ€”
abebfb47671dfd26423cca2a24154b74bfa7bff44e543ca36614a4f1c926ee43
0.0.2.38
1.58 MBNot scannedโ€”
abebfb47671dfd26423cca2a24154b74bfa7bff44e543ca36614a4f1c926ee43
Showing 1 to 7 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

More from http://vidsbee.com/

Popular in Developer Tools