Extension Auditor
Sign Up
Chrome Web Store
1Versions
1Code reviewed

Caution required

Suspicious in code review

Our reviewer found behaviour consistent with malware, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

19 indicators in this extension

19 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Deutsche Bahn 2.0 is rated caution by Extension Auditor. It comes from a publisher with 3 extensions and was last updated in June 2024.

Analyst notes

The extension's JavaScript code is entirely clean — all DOM manipulation is scoped to [domain withheld], there is no data exfiltration, no remote code loading, no eval, and no obfuscation; the ML score of 0.30 is a false positive driven by 31 image assets and ordinary DOM patterns. However, several contextual signals raise concern: the publisher has a 100% malicious track record on their 2 other extensions; the CWS listing description contains text copied verbatim from at least four unrelated extensions (Topicflow, Dovie, a Gemini folder organizer, and a travel deals extension), indicating a spam or aggregated publisher account; contains extensive dead CSS for a HelloFresh shopping cart UI injected into [domain withheld] pages, and declares a HelloFresh multi-country URL table that is never actually used for navigation — both suggesting shared codebase with the publisher's other (malicious) extensions. The chrome-stats third-party score is low (impact) and corroborates the benign code assessment, while the publisher reputation signal directly contradicts it.

Deutsche Bahn 2.0

Deutsche Bahn 2.0 Chrome extension security report

ID: jidmohdohcjadkdpoiijpdonhlafhdkm

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
2.2
Size
0.31 MB
Rating
0.0/5
Reviews
0
Users
38
Type
Extension
Updated
Jun 9, 2024
Category
Travel
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue
This publisherTrack record
3extensions
2 no longer listed

Publisher Contextual Analysis

Author
Life2.0
Privacy
Privacy Policy
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
3
Active
1
Obsolete
2
Listed
3
Unlisted
0
Users
103

Email Change History

1 change
Jun 10, 2024

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
https://int.bahn.de/*
Host
Medium
Host permission — access limited to this URL pattern.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

19 indicators in this extension

19 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Finds you the fastest trains and best time to travel

Read the publisher’s full description

Improved DB UX: 1. Highlights travel time 2. Highlights late night trains 3. Highlights train disruption notifications 4. Automatically finds you the best tickets for the locations by going through all trains

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
URLs
11

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

19 indicators in this extension

19 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
2.2
Latest
0.31 MBCaution0N/A
Showing 1 to 1 of 10 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In

Related extensions

More from Life2.0