Extension Auditor
Extension Auditor
Sign Up

Dark & Night Theme for Facebook™

ID: kimjncdkbadnjjanmgkkdcbfnflohadb

Could be malicious

Extension Info & Metadata

Status
Removed
Version
1.1.4
Size
0.51 MB
Rating
4.7/5
Reviews
873
Users
81,463
Type
Extension
Updated
May 7, 2020
Category
1_communication
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Author
CypressView Profile
Total Extensions
3
Active
0
Obsolete
3
Listed
3
Unlisted
0
Total Users
464,904

Customizable Dark & Night theme for Facebook™.

Dark & Night Theme for Facebook™ allows you to change the Facebook™ theme to dark mode in just one click! Tired of the boring Facebook™ theme? Want to protect your eyes with dark mode? With our customizable extension, you can create your own theme with just a few simple clicks. Features - 5 built-in dark themes mode - Build you own theme - Header Color/Header Text Color/Theme Color/Buttons Color and more... Make Facebook Dark with Dark Theme & Night Theme for Facebook It's time to make Facebook dark and stylish! Facebook™ is registered trademarks of Facebook Inc. This extension is neither endorsed by nor affiliated with Facebook™.

Item
Type
Severity
Description
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
webRequestBlocking
Permission
Critical
This permission allows the extension to intercept, modify, or block any web request in real-time before it reaches its destination. Rated Critical because it can modify sensitive data (like passwords, credit cards) before encryption, redirect traffic to malicious sites, or block security updates.
Dangerous Permission Combination
Risk Factor
Critical
This extension can intercept, modify, and block web requests in real-time.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 15% increase: Older manifest version lacks modern security controls
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
http://*/*
Permission
Unknown
No classification available for this permission.
https://*/*
Permission
Unknown
No classification available for this permission.

The extension declares 'webRequest' and 'webRequestBlocking' permissions, which are unnecessary for a theme customization tool. These permissions allow the extension to intercept and modify all network requests, posing a significant privacy and security risk.

manifest.json (Line 12)
{  "permissions": [    "tabs",    "http://*/*",    "https://*/*",    "webRequest",    "webRequestBlocking",    "storage"  ]}

The background page loads 'background.bundle.js', which is not included in the provided analysis files. This missing file likely contains the logic using the sensitive webRequest permissions. Combined with the store removal for malware, this absence hides potentially malicious activity such as data interception or code injection.

background.html (Line 12)
<script type="text/javascript" src="background.bundle.js"></script>

By severity

Critical0
High2
Medium0
Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
1.1.42

Files with findings

2 distinct paths — top paths by unique finding count:

  • background.html1
  • manifest.json1
S.No.
Category
Severity
File
Summary
Found in Version
1Other
high
manifest.json (line 12)The extension declares 'webRequest' and 'webRequestBlocking' permissions, which are unnecessary for a theme customization tool. These permissions allow the extension to intercept and modify all network requests, posin…
1.1.4
2Other
high
background.html (line 12)The background page loads 'background.bundle.js', which is not included in the provided analysis files. This missing file likely contains the logic using the sensitive webRequest permissions. Combined with the store r…
1.1.4
URLs
18
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
momentjs.com/guides/http://momentjs.com/guides/#/warnings/define-locale/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/js-date/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/min-max/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/add-inverted-param/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/zone/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/dst-shifted/
npms.io/searchhttps://npms.io/search?q=ponyfill.
*/*http://*/*
*/*https://*/*
www.w3.org/1999/02/22-rdf-syntax-nshttp://www.w3.org/1999/02/22-rdf-syntax-ns#
Showing 1 to 10 of 20 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
1.1.4
Latest
0.51 MB
Malicious
2
546e3aa32216ec57975fbb8f16e80242e22fbe52b329e75f3ced18fc4189cc81
Showing 1 to 1 of 10 rows
Rows per page:

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In