Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Docs Creator

CRITICAL RISKRemoved from Chrome Web Store

Docs Creator

ID: glidbdbacfjioedheokaociibpcijiha

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

3.7.0

Size

0.06 MB

Rating

4.0/5

Reviews

Users

155,279

Type

Extension

Updated

Mar 23, 2021

Publisher Contextual Analysis

Author: Docs CreatorView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

156,722

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Create new docs, sheets, slides and view google drive files from your browser bar.

Docs Creator is a quick way to create Docs, Sheets, or Forms from the Chrome browser menu. Once you click on New Document, the file will be saved to your Google Drive account under My Drive. You don't even need to open it. With Docs Creator, you can browse any files and folders on your Google Drive. Just click the extension icon and a pop-up window will display all the files contained in your google drive. New Features in the 3.2 Update: -New header with Google Drive functionality -Drastically reduced file size -New optional features and functionality for Google Sites and Draw.io -Improved Animation New features in the 3.0 Update: -New and improved UI with better readability and animations -Completely rewritten and cleaner code which makes it easier to improve in the future -Adds new functionality with Google Drawings and Google Forms -More features on the way shortly!!

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High3

Medium2

Low0

Versions scanned

Showing 1 of 5 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.4.0 Code review	7

Extension Version	Code Review Findings
3.4.0	7

Files with findings

3 distinct paths — top paths by unique finding count:

js/background.js4
main.html2
js/content.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	js/background.js (line 19)	The extension registers two blocking webRequest listeners covering all of *.google.com, giving it the ability to intercept, inspect, and modify both outgoing request headers and incoming response headers for every Goo…	3.4.0
2	Privilege Escalation	critical	js/background.js (line 61)	The extension strips the X-Frame-Options response header from all google.com sub-frame responses. X-Frame-Options is a critical security header that prevents clickjacking by prohibiting a page from being embedded in a…	3.4.0
3	Network Interception	high	js/background.js (line 47)	The extension silently replaces the User-Agent header with an iPhone/iOS identity on every sub-frame request to any google.com URL. This spoofs the browser's identity to the remote server without the user's knowledge …	3.4.0
4	Network Interception	high	js/background.js (line 56)	This handler strips the `X-Frame-Options` header from Google subframe responses. Removing anti-framing protections is a classic clickjacking/UI-redressing technique that lets the extension embed pages Google intended …	3.4.0
5	Unauthorized Data Collection	high	main.html (line 168)	The extension's popup embeds Google Drive in a full-page iframe. Combined with the background script that strips X-Frame-Options headers, Google's own embedding protections are defeated so this works. Embedding authen…	3.4.0
6	Phishing	medium	main.html (line 160)	The extension intentionally loads Google Drive inside an iframe hosted by the extension UI. On its own this is unusual for a utility extension, and together with the background code that removes `X-Frame-Options`, it …	3.4.0
7	Unauthorized Data Collection	medium	js/content.js (line 1)	A content script injected at document_start on all URLs runs a setInterval every second to scan and intercept all anchor tags on every page the user visits. While the visible behavior is intercepting Google Drive link…	3.4.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


drive.google.com	/drive/u/0/my-drive	https://drive.google.com/drive/u/0/my-drive
drive.google.com	/drive/u/0/shared-with-me	https://drive.google.com/drive/u/0/shared-with-me
drive.google.com	/drive/u/0/recent	https://drive.google.com/drive/u/0/recent
drive.google.com	/drive/u/0/starred	https://drive.google.com/drive/u/0/starred
drive.google.com	/drive/u/0/	https://drive.google.com/drive/u/0/
docs.google.com	/document/create	https://docs.google.com/document/create
docs.google.com	/spreadsheets/create	https://docs.google.com/spreadsheets/create
docs.google.com	/presentation/create	https://docs.google.com/presentation/create
docs.google.com	/drawings/	https://docs.google.com/drawings/
docs.google.com	/forms/create	https://docs.google.com/forms/create

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

wyskakuje że dysk google odrzuca połączenie, a jak włączam dysk to wszystko działa

Jasiek·21 Mar 2021

NOT FROM GOOGLE! This is EXTREMELY DECEIVING. It is implying that the extension is from Google. I believe that they are using that name to mislead and manipulate Google consumers. The only way to contact the developer is an email: "[email protected]". Also, there is no available document to see what personal data that they are collecting from my account. THIS EXTENSION IS DANGEROUS & MISLEADING! PLEASE remove from the Google WebStore.

Andrea Garcia·4 Mar 2021

haha doofis cant make out drawings and sites

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Docs Creator

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 5 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews