Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Day night switch

CRITICAL RISKRemoved from Chrome Web Store

Day night switch

ID: oakklicklkangfocnigjjpbhibghkdkp

Could be malicious

Extension Info & Metadata

Status

Removed

Version

1.1.4

Size

0.46 MB

Rating

2.1/5

Reviews

Users

824,449

Type

Extension

Updated

Oct 1, 2020

Publisher Contextual Analysis

Author: Gerald LindermanView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

824,449

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Turn dark theme for websites

Switch websites to Night mode with Day Night Switch. The extension supports a long list of websites and enables a dark theme for them. How to use: - Click on extension button in toolbar to switch on or off - Some sites are broken? Don’t worry! You can add a website to the blacklist.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High0

Medium3

Low2

Versions scanned

Showing 2 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.4 Code review	3
1.1.3 Code review	3

Extension Version	Code Review Findings
1.1.4	3
1.1.3	3

Files with findings

5 distinct paths — top paths by unique finding count:

popup.html2
background.js1
css/whatsapp.css1
inject.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	background.js (line 67)	The background page dynamically creates a script element and loads JavaScript from `www.googletagmanager.com` into the privileged extension context. Because the manifest CSP explicitly permits remote scripts from Goog…	1.1.4
2	Other	medium	manifest.json (line 11)	The extension injects the full 4,601-line moment.js date library into every page the user visits at document_start, yet inject.js never calls any moment.js function — it uses new Date() directly. Injecting an unused h…	1.1.3
3	Tracking	medium	css/whatsapp.css (line 1)	This injected stylesheet references remote assets on `raw.githubusercontent.com`. Since `inject.js` applies these CSS files at `document_start`, visiting matching sites can trigger third-party requests that reveal bro…	1.1.4
4	Tracking	medium	popup.html (line 5)	The extension popup loads CSS assets from two external third-party servers (stackpath.bootstrapcdn.com and fonts.googleapis.com) every time the popup is opened. These requests send the user's IP address, browser User-…	1.1.3
5	Other	low	inject.js (line 208)	The inject.js script uses an undeclared global variable `blacklist` (no `var`/`let`/`const`) when reading from storage, implicitly creating a global on the page's window object. While this appears to be a coding overs…	1.1.3
6	Tracking	low	popup.html (line 5)	The popup fetches remote Bootstrap CSS and Google Fonts every time the extension UI is opened. That leaks extension usage metadata to third parties and allows remote styling content to influence a privileged extension…	1.1.4

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

155

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


chrome.google.com	-	https://chrome.google.com
www.googletagmanager.com	/gtm.js	https://www.googletagmanager.com/gtm.js?id=GTM-TXS6JPH&l=
github.com	/liorgrossman/darkness/tree/master/chrome-extension/themes	https://github.com/liorgrossman/darkness/tree/master/chrome-extension/themes
userstyles.org	/styles/126925/bing-dark	https://userstyles.org/styles/126925/bing-dark
colincon.ga	-	http://colincon.ga
userstyles.org	/styles/101431/new-duckduckgo-dark-theme	https://userstyles.org/styles/101431/new-duckduckgo-dark-theme
userstyles.org	/styles/120329/ebay-dark-black-midnight-smacked	https://userstyles.org/styles/120329/ebay-dark-black-midnight-smacked
userstyles.org	/styles/118180/dusky-gray-facebook-dark-theme	https://userstyles.org/styles/118180/dusky-gray-facebook-dark-theme
static.xx.fbcdn.net	/rsrc.php/v2/yV/r/R3gnFfkFEmR.png	https://static.xx.fbcdn.net/rsrc.php/v2/yV/r/R3gnFfkFEmR.png
scontent-fra3-1.xx.fbcdn.net	/t39.2365-6/12057050_1520753484910899_2061865607_n.png	https://scontent-fra3-1.xx.fbcdn.net/t39.2365-6/12057050_1520753484910899_2061865607_n.png

Showing 1 to 10 of 160 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-
4.4.3.2	IPv4	-

2.1 out of 5 · 8 most recent reviews

Text reviews

Positive

Negative

does 100% nothing!

A Chan·20 Jan 2021

worked on some pages, but not most pages i would have needed it on. it doesn't even work on the chrome web store. it does work on the google main page, but then again is screws with the twitch page where it removes all colors from the names in chat. can sadly not recommend =/

René Hammes·6 Jan 2021

Does not work on desktop.

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Day night switch

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews