Extension Auditor
Extension Auditor
Sign Up
EasyBib Toolbar

EasyBib Toolbar

ID: hmffdimoneaieldiddcmajhbjijmnggi

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
0.7.8
Size
0.50 MB
Rating
3.7/5
Reviews
99
Users
100,000
Type
Extension
Updated
Nov 19, 2024
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
CheggView Profile
Privacy
Privacy Policy
Help
Help Center
Country
US
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
3990 Freedom Circle Santa Clara, CA 95054 US
Website
Visit
Total Extensions
3
Active
3
Obsolete
0
Listed
3
Unlisted
0
Total Users
501,000
Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4

Cite web sites with one click using the EasyBib Toolbar and receive advice on the credibility of the web site you're citing.

EasyBib is the world's largest bibliography maker and citation machine. Our EasyBib toolbar will let you cite web sites with one click. Receive advice on the credibility of the web site you're citing. Cite as many sources as you need to build a fully-formatted, alphabetized, and Word-processor-ready bibliography.

Item
Type
Severity
Description
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
http://*/*
Permission
Unknown
No classification available for this permission.
https://*/*
Permission
Unknown
No classification available for this permission.

The bundled manifest declares manifest_version 2 with permissions 'http://*/*', 'https://*/*', 'tabs', and 'webRequest'. The published CWS listing (live manifest summary) shows manifest_version 3 with host_permissions '*://*/*', permissions ['tabs', 'storage'], and no webRequest. This discrepancy may mislead users about the actual extension capabilities, particularly the webRequest permission that allows monitoring all web traffic. The extension does not use webRequest broadly, but the mismatch is a red flag for potential covert permission escalation.

manifest.json (Line 4)
{  "manifest_version": 2,  "permissions": [    "http://*/*",    "https://*/*",    "tabs",    "webRequest"  ],  ...}

By severity

Critical0
High1
Medium0
Low0

Versions scanned

None of the 2 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path — top paths by unique finding count:

  • manifest.json1
S.No.
Category
Severity
File
Summary
Found in Version
1Other
high
manifest.json (line 4)The bundled manifest declares manifest_version 2 with permissions 'http://*/*', 'https://*/*', 'tabs', and 'webRequest'. The published CWS listing (live manifest summary) shows manifest_version 3 with host_permissions…
0.7.8
URLs
91
IPv4
6
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
content.easybib.com/students/research-guide/website-credibility-evaluation/http://content.easybib.com/students/research-guide/website-credibility-evaluation/
www.easybib.com/guideshttps://www.easybib.com/guides?utm_source=chrome&utm_medium=extensions
github.com/xing/wysihtml5https://github.com/xing/wysihtml5
twitter.github.com/bootstrap/http://twitter.github.com/bootstrap/
jhollingworth.github.io/bootstrap-wysihtml5/http://jhollingworth.github.io/bootstrap-wysihtml5/
github.com/schnawel007/bootstrap3-wysihtml5https://github.com/schnawel007/bootstrap3-wysihtml5
www.apache.org/licenses/LICENSE-2.0http://www.apache.org/licenses/LICENSE-2.0
github.com/tiffhttps://github.com/tiff
code.google.com/p/rangy/http://code.google.com/p/rangy/
peter.michaux.ca/articles/feature-detection-state-of-the-art-browser-scriptinghttp://peter.michaux.ca/articles/feature-detection-state-of-the-art-browser-scripting
Showing 1 to 10 of 100 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
2.57.63.63
IPv4
-
2.28.62.56
IPv4
-
16.2.16.36
IPv4
-
25.18.3.4
IPv4
-
35.25.42.56
IPv4
-
35.11.49.17
IPv4
-
Version
Size
Is Malicious
Findings
Permhash
0.7.8
Latest
0.66 MB
Malicious
1
5270d1f613f6a7f3c7d987f9d3c26915acf3cc7c080d4081afb8ad9912739ed0
1.0.0
0.50 MB
Benign
—
3fa4ea71dc11b9374d4f5997fcabd538e6e6db1f0225f2f32e92afe3c699b5ba
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In