Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Easy Auto Refresh

CRITICAL RISKRemoved from Chrome Web Store

Easy Auto Refresh

ID: hjhcppadbanfedcegnhkkdoicejnfncc

Could be malicious

Extension Info & Metadata

Status

Removed

Version

1.4.3

Size

0.49 MB

Rating

4.5/5

Reviews

Users

759,285

Type

Extension

Updated

Oct 27, 2020

Publisher Contextual Analysis

Author: Mercedes PotterView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

759,285

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Reload your tabs by schedule. Don’t miss an important update.

Ever waited for an important update on the website? pressed Ctrl-R many times? Easy Auto Refresh sets up a timer and updates page automatically. You can keep it open. Or continue browsing the web in other tabs. You can: * Set up multiple timers on several tabs * Select an interval from preset or type in a custom interval in seconds * Disable/enable all timers Unlike other apps, this app disables annoying popups like “Do you want to reload this site”.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium1

Low1

Versions scanned

Showing 1 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.4.1 Code review	4

Extension Version	Code Review Findings
1.4.1	4

Files with findings

4 distinct paths — top paths by unique finding count:

chrome.js1
common.js1
dis_alerts.js1
popup/popup.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	common.js (line 26)	On every refresh cycle the background script injects `dis_alerts.js` into the target tab via `chrome.tabs.executeScript`. That script unconditionally sets `window.onbeforeunload = function(e) {}`, silently suppressing…	1.4.1
2	Code Injection	high	dis_alerts.js (line 1)	This content script, injected into every auto-refreshed tab, silently nullifies the page's `onbeforeunload` handler. Any form data warnings, unsaved-changes prompts, or logout confirmations the page would normally sho…	1.4.1
3	Obfuscation	medium	chrome.js (line 3)	Passing `null` to `chrome.storage.local.get()` reads the entirety of the extension's local storage in one call, which is broader than necessary. Immediately after, `common.js` is dynamically injected into the backgrou…	1.4.1
4	Other	low	popup/popup.js (line 56)	A hardcoded domain (`mybrowseraddon.com`) is explicitly excluded from auto-refresh even when a non-zero interval is set. No other domain receives this treatment. This special-casing suggests an undisclosed relationshi…	1.4.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/master/LICENSE	https://github.com/twbs/bootstrap/blob/master/LICENSE
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license
github.com	/whatwg/html/issues/2369	https://github.com/whatwg/html/issues/2369
html.spec.whatwg.org	-	https://html.spec.whatwg.org/#nonce-attributes
js.foundation	-	https://js.foundation/
jsperf.com	/thor-indexof-vs-for/5	https://jsperf.com/thor-indexof-vs-for/5

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-

2.9 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Pretty bad. I entered a number and hit enter and nothing happened. No start button button. No visual indicator that it's running. Frustrating extension. Deleted.

Tony Henrich·2 Feb 2021

This is just really bad!

David Jay·1 Feb 2021

Does not work at all. I mean it does not reload. And I restarted chromium.

Brendel, Matthias

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Easy Auto Refresh

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating