Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Dark theme for new tab page

CRITICAL RISKRemoved from Chrome Web Store

Dark theme for new tab page

ID: egopeokecbgdiiofbemdgbofafjepang

Could be malicious

Supported Languages

🇪🇹Amharic

🇸🇦Arabic

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇱Hebrew

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇮🇳Kannada

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇮🇷Persian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇰🇪Swahili

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

7.0.0

Size

0.62 MB

Rating

4.4/5

Reviews

176

Users

20,000

Type

Extension

Updated

May 16, 2023

Publisher Contextual Analysis

Author: olegdavidoffskyView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

20,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Turn on dark theme on new tab. Enable night mode on browser home page.

Activate the dark theme on the new tab in Google Chrome with a single click. With the night mode for your home page, you'll help your eyes and make your browser more beautiful! By clicking "Add to chrome", I accept and agree to installing the Dark Tab extension and setting Chrome™ New Tab to that provided by the service and the Terms of Use and Privacy Policy. Search engine services will be provided by Microsoft Bing. Apart from the dark theme, our new tab page has a number of wonderful features: - Set dark background photos for your browser's home page. - Turn on automatic rotation of background photos - Enjoy beautiful and stylish minimalistic design with easy to use visual bookmarks (= speed dials) for one click access to your favorite websites - Customize the look of visual bookmarks and choose beautiful covers for them - Create folders for visual bookmarks to keep them organized This night mode extension is completely free with no in-app purchases. During the installation process, the browser will ask you for permissions. We use the smallest set of permissions possible to give you the full functionality of the plugin. Permissions description: - to get titles of websites automatically when they are added to visual bookmarks. - tabs - to create service tabs when adding a new website to speed dial from the context menu - history - to browse recently visited websites in the new tab - chrome://favicon/ - to change the favicon of the new tab - storage & unlimitedStorage - to store your settings and wallpapers - contextMenus - to add new visual bookmarks to the home page of any website via the context menu This extension is independent and not associated with other popular new tab or speed dial extensions in the Chrome Web Store such as Infinity New Tab, Momentum, CaretTab, FVD Speed Dial or others. Your Privacy Matters: By clicking "Add to Chrome", I accept and agree to install Dark Tab according to the Terms of Use and Privacy Policy. You can read our privacy policy and terms and conditions unsing the following links: https://lampabar.com/etc/pages/terms_of_use.html https://lampabar.com/etc/pages/privacy.html https://lampabar.com/etc/pages/contact_us.html

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 169 ratings-1 (-1%)

Average Rating

Current: 4.47 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High6

Medium5

Low1

Versions scanned

Showing 1 of 18 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
6.0.48 Code review	12

Extension Version	Code Review Findings
6.0.48	12

Files with findings

4 distinct paths — top paths by unique finding count:

background.js7
site.js3
public/js/ga.js1
public/settings/config.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	high	background.js (line 2015)	The extension exfiltrates the hostname of every URL the user bookmarks (and other sites it processes) to a suspicious third-party domain `univextsgoing.website` (a generic .website TLD with a randomized name). This is…	6.0.48
2	Data Exfiltration	high	site.js (line 10016)	Every domain the user adds as a bookmark (or that is otherwise resolved through `getBookmarkImageData`) is sent to `univextsgoing.website`. This duplicates the background-script behaviour from the page context, leakin…	6.0.48
3	Remote Code Loading	high	background.js (line 1827)	Remote `partner_id` returned by `capitan.link/partner/new-installation` is used to fetch a remote `backgrounds` and `sources` payload that is then written into `chrome.storage.local` and rendered as the user's news so…	6.0.48
4	Remote Code Loading	high	public/js/ga.js (line 1)	The new-tab page dynamically injects the legacy Google Analytics `ga.js` script (loaded from `ssl.google-analytics.com`) and reports page-views and many in-app events (`_trackEvent` calls scattered in `site.js`) under…	6.0.48
5	Tracking	high	background.js (line 2582)	On install/update the extension calls a hard-coded affiliate/partner API at `https://capitan.link/api/v1/partner/new-installation` with a Bearer token (`bSfFnWJTETRWcnZR`) and an `extension_hash` (`ekrjherjn3u43regi24…	6.0.48
6	Unauthorized Data Collection	high	background.js (line 2057)	The extension is a paid affiliate of the `veve.com` ad/sponsored-link network: it generates a per-device identifier, calls `https://ajt72.veve.com/qlapi`, and injects the returned ads as 'partner bookmarks' on the new…	6.0.48
7	Tracking	medium	background.js (line 2471)	An uninstall URL is registered (`https://service-pages.info/extensions/newtab/dark_theme_and_tab/uninstall/index.html`) so that when the user removes the extension the browser opens a tracking page on `service-pages.i…	6.0.48
8	Tracking	medium	public/settings/config.json (line 1)	Hard-coded credentials/identifiers shipped with the extension: a long-lived Bearer `token` and an `extensionHash` used for the `capitan.link` partner API, plus the GA account and the `service-pages.info` uninstall tra…	6.0.48
9	Unauthorized Data Collection	medium	site.js (line 9679)	Front-end code in the new-tab page also fetches resources from the same suspicious `univextsgoing.website` domain. Combined with the same domain being called from `background.js`, this is a hard-coded callback to an u…	6.0.48
10	Unauthorized Data Collection	medium	background.js (line 1701)	The extension performs a `chrome.history.search` with empty query and `maxResults: 1e6`, then iterates `chrome.history.getVisits` on every result. This is a near-total enumeration of the user's browsing history. While…	6.0.48
11	Unauthorized Data Collection	medium	site.js (line 10004)	Hostnames the user bookmarks are sent to a second third-party server, `green-browser.com/allicons.json`, in addition to `univextsgoing.website`. Sending bookmark hostnames to multiple unrelated third parties extends t…	6.0.48
12	Tracking	low	background.js (line 2008)	Brand names returned by the `veve.com` ad network are sent to Clearbit's autocomplete API to resolve company domains. While Clearbit itself is a legitimate service, the data flow exposes the affiliate/ad chain to addi…	6.0.48

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

906

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


tailwindcss.com	/n///n1.	https://tailwindcss.com\n//\n1.
github.com	/mozdevs/cssremedy/issues/4	https://github.com/mozdevs/cssremedy/issues/4
github.com	/tailwindcss/tailwindcss/pull/116	https://github.com/tailwindcss/tailwindcss/pull/116
bugzilla.mozilla.org	/show_bug.cgi	https://bugzilla.mozilla.org/show_bug.cgi?id=190655
bugs.chromium.org	/p/chromium/issues/detail	https://bugs.chromium.org/p/chromium/issues/detail?id=999088,
bugs.webkit.org	/show_bug.cgi	https://bugs.webkit.org/show_bug.cgi?id=201297
bugs.chromium.org	/p/chromium/issues/detail	https://bugs.chromium.org/p/chromium/issues/detail?id=935729,
bugs.webkit.org	/show_bug.cgi	https://bugs.webkit.org/show_bug.cgi?id=195016
github.com	/mozilla/gecko-dev/blob/2f9eacd9d3d995c937b4251a5557d95d494c9be1/layout/style/res/forms.css	https://github.com/mozilla/gecko-dev/blob/2f9eacd9d3d995c937b4251a5557d95d494c9be1/layout/style/res/forms.css#L728-L737
github.com	/tailwindlabs/tailwindcss/issues/3300	https://github.com/tailwindlabs/tailwindcss/issues/3300

Showing 1 to 10 of 910 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

هخه

dr.khaled assal·15 Oct 2024

이 확장 프로그램으로 기존에 설정해놓은 새 탭의 배경화면과 이 프로그램의 설정에서 선택 가능한 테마 이미지들이 보이지 않는 현상을 2024.08.17 발��함. 삭제 후 재설치해도 동일함.

**·16 Aug 2024

이 확장 프로그램으로 기존에 설정해놓은 새 탭의 배경화면과 이 프로��램의 설정에서 선택 가능한 테마 이미지들이 보이지 않는 현상을 2024.08.17 발��함. 삭제 후 재설치해도 동일함.

**·

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Dark theme for new tab page

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 18 Versions12

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating