Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Currently

CRITICAL RISKRemoved from Chrome Web Store

Currently

ID: ojhmphdkpgbibohbnpbfiefkgieacjmh

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

5.1.1

Size

29.07 MB

Rating

4.0/5

Reviews

2,041

Users

70,000

Type

Extension

Updated

Aug 29, 2021

Publisher Contextual Analysis

Author: CurrentlyView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

70,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Replace new tab screen with current time and weather.

Currently is a simple extension that replaces your "New Tab" screen with a new one that shows you the current time and the weather while providing convenient web search powered by Yahoo. Permissions & Reasons Used Our extension uses the minimum permissions required: Permission: "geolocation" Reason: "In order for Currently to display accurate weather information for your area, it requires the ability to query your Latitude and Longitude."

User Growth

Showing data from Jan 01, 2022 to May 20, 2022

Versions

-12.5%(-10,000 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 2,041 ratings

Average Rating

Current: 4.05 / 5.0+0.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium0

Low0

Versions scanned

None of the 15 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
No versions with more than one unique code-review finding in this extension's history.

Extension Version	Code Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path — top paths by unique finding count:

app/js/autosuggest.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Unauthorized Data Collection	high	app/js/autosuggest.js (line 17)	Every keystroke typed into the search field is silently forwarded to `hemailaccesshere.net` — a domain with no disclosed affiliation to Yahoo (the actual search provider) or any legitimate autosuggest service. The end…	3.5.3

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

154

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.google-analytics.com;	-	https://www.google-analytics.com;
imp.currentlyweather.com	/impression.do	https://imp.currentlyweather.com/impression.do?event=${event}&source=${source}&traffic_source=${ap}&user_id=${userId}&subid=${userClass}&implementation_id=currently_&offer_id=ojhmphdkpgbibohbnpbfiefkgieacjmh&page=${optional}&referrer=${optional3}`;
hp.currentlyweather.com	/uninstall	https://hp.currentlyweather.com/uninstall?uc=${userClass}&source=${source}&ap=${ap}&uid=${userId}&i_id=currently_&cid=ojhmphdkpgbibohbnpbfiefkgieacjmh`
api.currentlyweather.com	/user%60,	https://api.currentlyweather.com/user`,
image.ibb.co	/mjnygo/stars.png	https://image.ibb.co/mjnygo/stars.png
image.ibb.co	/ir1DE8/twinkling.png	https://image.ibb.co/ir1DE8/twinkling.png
image.ibb.co	/bT4N7T/clouds.png	https://image.ibb.co/bT4N7T/clouds.png
plus.currentlyweather.com	/api/check	https://plus.currentlyweather.com/api/check?key=${e}`
plus.currentlyweather.com	/api/impression	https://plus.currentlyweather.com/api/impression?event=${e}&source=${Q}&traffic_source=${J}&user_id=${X}&subid=${ee}&implementation_id=currently_&offer_id=ojhmphdkpgbibohbnpbfiefkgieacjmh&page=${t}&referrer=${n}`;function

Showing 1 to 10 of 60 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


7.9.2.1	IPv4	-
3.3.5.3	IPv4	-
1.1.3.5	IPv4	-
3.3.8.8	IPv4	-
1.1.3.3	IPv4	-
1.1.8.5	IPv4	-
1.4.3.5	IPv4	-
1.48.22.78	IPv4	-
42.82.11.84	IPv4	-
41.6.1.5	IPv4	-
73.3.3.3	IPv4	-
8.2.8.2	IPv4	-
3.1.5.1	IPv4	-
46.3.8.9	IPv4	-
8.7.9.3	IPv4	-
124.2.3.9	IPv4	-
2.6.3.5	IPv4	-
3.7.1.8	IPv4	-
3.6.1.8	IPv4	-
3.9.1.6	IPv4	-
3.2.2.9	IPv4	-
2.9.3.9	IPv4	-
2.7.2.9	IPv4	-
3.1.2.6	IPv4	-
3.3.1.2	IPv4	-
2.3.3.5	IPv4	-
12.2.2.4	IPv4	-
3.3.3.5	IPv4	-
3.2.3.5	IPv4	-
3.2.2.4	IPv4	-
3.3.2.2	IPv4	-
3.5.5.7	IPv4	-
99.4.9.1	IPv4	-
3.4.2.8	IPv4	-
3.9.1.7	IPv4	-
1.7.1.5	IPv4	-
58.37.91.55	IPv4	-
2.9.2.1	IPv4	-
4.1.6.2	IPv4	-
37.7.2.2	IPv4	-
14.9.7.6	IPv4	-
4.5.6.2	IPv4	-
23.22.52.38	IPv4	-
2.2.6.5	IPv4	-
2.3.9.6	IPv4	-
10.1.9.34	IPv4	-
7.74.75.75	IPv4	-
10.74.76.43	IPv4	-
4.15.88.22	IPv4	-
10.6.2.8	IPv4	-
4.62.85.77	IPv4	-
7.21.27.25	IPv4	-
55.51.88.71	IPv4	-
1.69.87.48	IPv4	-
4.6.38.13	IPv4	-
1.13.49.4	IPv4	-
27.23.79.15	IPv4	-
8.92.15.75	IPv4	-
1.4.5.2	IPv4	-
1.8.1.2	IPv4	-
1.3.2.5	IPv4	-
12.7.3.2	IPv4	-
4.5.7.9	IPv4	-
10.8.1.1	IPv4	-
12.5.1.1	IPv4	-
1.2.2.3	IPv4	-
1.3.3.3	IPv4	-
2.5.5.5	IPv4	-
4.9.5.5	IPv4	-
6.3.2.6	IPv4	-
1.31.79.79	IPv4	-
2.79.79.79	IPv4	-
5.5.28.39	IPv4	-
2.88.48.48	IPv4	-
24.22.47.46	IPv4	-
24.23.48.47	IPv4	-
11.39.2.79	IPv4	-
4.5.5.7	IPv4	-
2.27.4.55	IPv4	-
27.26.54.53	IPv4	-
1.74.23.84	IPv4	-
2.18.2.17	IPv4	-
21.21.42.43	IPv4	-
33.83.13.53	IPv4	-
12.14.23.28	IPv4	-
1.14.19.28	IPv4	-
14.13.29.2	IPv4	-
16.15.33.22	IPv4	-
13.11.25.16	IPv4	-
41.12.16.23	IPv4	-
5.1.17.15	IPv4	-
14.12.29.2	IPv4	-
13.1.25.16	IPv4	-
49.79.19.39	IPv4	-
38.24.78.46	IPv4	-
14.11.27.23	IPv4	-
2.24.61.21	IPv4	-
22.3.3.3	IPv4	-
22.5.2.2	IPv4	-
2.2.4.3	IPv4	-
8.2.6.1	IPv4	-
19.16.39.22	IPv4	-
179.1.2.1	IPv4	-
3.2.4.2	IPv4	-
75.55.64.25	IPv4	-
2.3.2.6	IPv4	-
53.16.81.16	IPv4	-
48.18.11.31	IPv4	-
1.75.16.16	IPv4	-
159.2.1.1	IPv4	-
12.12.19.17	IPv4	-
18.39.91.16	IPv4	-
18.61.97.17	IPv4	-
13.95.24.3	IPv4	-
2.2.3.7	IPv4	-
2.19.3.69	IPv4	-
10.7.5.4	IPv4	-
17.95.16.47	IPv4	-
1.92.62.62	IPv4	-
64.4.7.3	IPv4	-
5.3.7.9	IPv4	-
1.1.1.2	IPv4	-
1.1.2.1	IPv4	-
8.23.78.32	IPv4	-
16.9.6.7	IPv4	-
39.125.172.188	IPv4	-
44.6.1.1	IPv4	-
2.26.47.72	IPv4	-
1.7.7.9	IPv4	-
1.4.7.9	IPv4	-
69.35.3.44	IPv4	-
2.4.3.8	IPv4	-
44.1.6.4	IPv4	-
5.1.8.1	IPv4	-
50.1.5.7	IPv4	-
5.1.3.2	IPv4	-
35.55.85.94	IPv4	-
14.17.25.23	IPv4	-
43.45.86.91	IPv4	-
23.11.48.16	IPv4	-
2.5.6.6	IPv4	-
1.1.1.1	IPv4	-
41.21.74.23	IPv4	-
2.2.5.3	IPv4	-
8.5.2.2	IPv4	-
67.88.29.19	IPv4	-
34.11.5.44	IPv4	-
44.3.6.4	IPv4	-
5.1.7.1	IPv4	-
22.3.1.1	IPv4	-
12.91.16.15	IPv4	-
12.97.17.16	IPv4	-
44.9.7.9	IPv4	-
63.7.6.1	IPv4	-

Showing 1 to 154 of 160 rows

Rows per page:

1.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

It appears they have recently put a crypto miner into this extension.. Whenever I have the currently tabopen, my CPU goes to 100% usage and the minute I go to another tab it goes down again. This is disgusting.

Fabian van Koppen·27 Mar 2022

love it, but little heavy 29mb

Jamie Ng·28 Nov 2021

New Update VERY BAD AND UGLY!!! EDIT: NEW DEVELOPER. DO NOT TRUST. HIJACKS SEARCH ENGINE. SPAMWARE

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Currently

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 15 Versions1

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating