Chrome Web Store
4Versions
1Code reviewed

No malware found

In code review (v3.4)

Our reviewer read version 3.4 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

ColorZilla, used by 4,000,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can read and change data on all websites and can inject scripts into pages.

Key findings

  • high· other —The bundled manifest uses manifest version 2 and includes '<all_urls>' in permissions. The live CWS listing published manifest uses version 3 with 'host_permissions' and additional permissions 'scripting' and 'offscreen'. This mismatch suggests a lag between the packaged source and the published version, but it is not malicious.

The extension is the well-known ColorZilla color picker. The ML model gave a risk score of 0.00 (low), and the risk-engine flagged only necessary broad permissions. All network calls are to the publisher's own domains () for welcome pages, help, and palette sharing, consistent with the privacy policy. No data exfiltration, tracking, or malicious code was found. The single manifest mismatch is likely due to an in-progress Manifest V3 migration.

ColorZilla

ColorZilla

ID: bhlhnicpbhignbdhedgjhgdocnmhomnp

Supported Languages

🇧🇷Brazilian Portuguese
🇨🇿Czech
🇳🇱Dutch
🇺🇸English
🇩🇪German
🇬🇷Greek
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇲🇽Latin American Spanish
🇵🇱Polish
🇵🇹Portuguese
🇷🇺Russian
🇪🇸Spanish
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
4.1
Size
0.40 MB
Rating
4.6/5
Reviews
3,900
Users
4,000,000
Type
Extension
Updated
May 22, 2024
Category
Developer tools
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
Iosart Labs LLCView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
4,000,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

About this extension

Advanced Eyedropper, Color Picker, Gradient Generator and other colorful goodies

Read the publisher’s full description

ColorZilla is the most user friendly, full-featured, secure and reliable color picker and color related suite of tools. It is one of the most popular Chrome and Firefox developer extensions with over 10 million downloads worldwide. With ColorZilla you can get a color reading from any point in your browser, quickly adjust this color and paste it into another program. And it can do so much more... == Features == ✓ Eyedropper - get the color of any pixel on the page ✓ Advanced Color Picker (similar to Photoshop's) ✓ Ultimate CSS Gradient Generator ✓ Webpage Color Analyzer - get a color palette for any site ✓ Palette Viewer with 7 pre-installed palettes ✓ Color History of recently picked colors ✓ Various sampling sizes - 1x1, 3x3, 5x5, 11x11 and 25x25 pixels ✓ Sample average color of any selected area ✓ Displays element information like tag name, class, id, size etc. ✓ Auto copy picked colors to clipboard ✓ Keyboard shortcuts ✓ Manipulate colors by their Hue/Saturations/Value components ✓ Get colors of dynamic hover elements ✓ Single-click to start color picking (currently only on Windows) ✓ Pick colors at any zoom level ✓ All features here: https://colorzilla.com/chrome/features.html == Why does ColorZilla need permission to "access data on all websites"? == This permission is needed by ColorZilla for its basic functionality of picking colors from websites. ColorZilla **DOES NOT** collect any of your data or your browsing activity on any websites. We are pretty fanatical about privacy ourselves, and your privacy is extremely important to us. Please visit this page for more info - https://colorzilla.com/chrome/privacy.html == Feedback and bug reports == If you're having issues or found a bug, please don't post you bug report here, contact us directly so we can fix it: https://colorzilla.com/contact/ == Enjoying ColorZilla? Please rate! == If you like ColorZilla, please help spread the word by giving it a 5 star rating here ;) If you're not fully satisfied, please contact us https://colorzilla.com/contact/ and we'll make sure to help. == ColorZilla homepage == Additional info, help and more is here: https://colorzilla.com/chrome/ == Stay tuned == For new feature announcements or just to say hello, please follow ColorZilla on Twitter https://twitter.com/colorzilla

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
16

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Showing 1 to 4 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Developer Tools