Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: EasyNav

CRITICAL RISKRemoved from Chrome Web Store

EasyNav

ID: aobeidoiagedbcogakfipippifjheaom

Could be malicious

Supported Languages

🇺🇸English

🇫🇷French

Extension Info & Metadata

Status

Removed

Version

0.1

Size

1.22 MB

Rating

2.5/5

Reviews

Users

30,000

Type

Extension

Updated

Oct 28, 2024

Publisher Contextual Analysis

Author: easynavextView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

30,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Make your internet experience more enjoyable

- EasyNav blocks numerous intrusive ads - Our extension will automatically close cookie popups. - EasyNav works in the background and requires no intervention from you after installation. - This cleanup also helps to speed up your browsing experience.

User Growth

Showing data from Oct 28, 2024 to Mar 01, 2025

Versions

No change in user count

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 23 ratings+3 (15%)

Average Rating

Current: 2.48 / 5.0+2.48

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High2

Medium2

Low2

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.1 Code review	8

Extension Version	Code Review Findings
0.1	8

Files with findings

3 distinct paths — top paths by unique finding count:

background.js6
content.js1
options.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	background.js (line 105)	On every tab update, the background service worker reads a per-domain payload from chrome.storage.local (keyed by the visited site's domain prefix) and injects it as inline JavaScript into the page's MAIN world via a …	0.1
2	Remote Code Loading	critical	background.js (line 150)	hello() polls https://www.easynav.net/hello.json once at install and every 1440 minutes (see the chrome.alarms 'ping' setup) sending a persistent sync_uid identifier as a query parameter, then blindly writes every key…	0.1
3	Network Interception	high	background.js (line 262)	updateRules() fetches a JSON document from easynav.net (with the install's sync_uid attached) and feeds the entire response straight into chrome.declarativeNetRequest.updateDynamicRules without validation. The server …	0.1
4	Remote Code Loading	high	options.js (line 33)	The 'Check for Updates' button pulls a plain-text patch file directly from a personal GitHub repo (raw.githubusercontent.com/Rutuj-Runwal/RR-Adblocker/main/patch.txt) over a non-pinned channel, parses it as block/allo…	0.1
5	Code Injection	medium	background.js (line 79)	The script handler index (cr.j) is resolved through commonJSHandlers, a table that comes from the rules module. Combined with the remote rules.json/hello.json delivery channel (which can write to chrome.storage and in…	0.1
6	Tracking	medium	background.js (line 305)	A daily 'ping' alarm calls hello() which sends the persistent sync_uid identifier to easynav.net. This is a long-lived tracking beacon that uniquely identifies each browser install across time and also acts as the pol…	0.1
7	Code Injection	low	background.js (line 36)	cookie.js is force-injected into the MAIN world of every http(s) tab on every URL change, before page scripts run. While cookie.js itself only auto-clicks consent dialogs on a small allowlist, having a document_start …	0.1
8	Unauthorized Data Collection	low	content.js (line 94)	Every page collects the list of third-party script src URLs (excluding a small CDN allowlist) and forwards it to the extension service worker via runtime.sendMessage as 'blockedItems'. While the background.js shown he…	0.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.easynav.net	/hello.json%60;	https://www.easynav.net/hello.json`;
www.easynav.net	/rules.json%60;	https://www.easynav.net/rules.json`;
raw.githubusercontent.com	/Rutuj-Runwal/RR-Adblocker/main/patch.txt	https://raw.githubusercontent.com/Rutuj-Runwal/RR-Adblocker/main/patch.txt
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
ns.adobe.com	/photoshop/1.0/	http://ns.adobe.com/photoshop/1.0/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceEvent	http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


0.0.0.1	IPv4	-
104.197.199.227	IPv4	-
146.190.12.4	IPv4	-
159.203.84.58	IPv4	-
162.252.214.4	IPv4	-
167.206.10.148	IPv4	-
167.99.31.227	IPv4	-
185.165.169.108	IPv4	-
185.193.38.148	IPv4	-
203.195.121.11	IPv4	-
23.109.87.101	IPv4	-
23.109.87.42	IPv4	-
35.194.26.233	IPv4	-
35.224.227.218	IPv4	-
35.226.75.50	IPv4	-
35.232.188.118	IPv4	-
35.238.205.163	IPv4	-
35.239.57.233	IPv4	-
37.1.209.213	IPv4	-
37.1.213.100	IPv4	-
45.32.105.134	IPv4	-
5.188.62.157	IPv4	-
5.61.55.143	IPv4	-
51.77.227.100	IPv4	-
51.77.227.101	IPv4	-
51.77.227.102	IPv4	-
51.77.227.103	IPv4	-
51.77.227.96	IPv4	-
51.77.227.97	IPv4	-
51.77.227.98	IPv4	-
51.77.227.99	IPv4	-
51.89.187.136	IPv4	-
51.89.187.137	IPv4	-
51.89.187.138	IPv4	-
51.89.187.139	IPv4	-
51.89.187.140	IPv4	-
51.89.187.141	IPv4	-
51.89.187.142	IPv4	-
51.89.187.143	IPv4	-
77.162.125.199	IPv4	-
91.241.60.117	IPv4	-
173.249.49.204	IPv4	-
192.168.0.1	IPv4	-
192.168.1.1	IPv4	-
216.18.176.4	IPv4	-
120.132.57.41	IPv4	-
199.116.177.156	IPv4	-
111.90.159.132	IPv4	-
111.90.150.10	IPv4	-
111.90.150.149	IPv4	-
193.197.158.209	IPv4	-
212.95.32.75	IPv4	-
180.76.2.18	IPv4	-
109.169.66.161	IPv4	-
78.46.19.203	IPv4	-
127.0.0.1	IPv4	-
77.91.202.130	IPv4	-

Showing 1 to 57 of 60 rows

Rows per page:

3.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

C'est une extension fantastique qui simplifie la navigation sur Internet. Hautement recommandé pour tous ceux qui veulent améliorer leur expérience en ligne.

Gennadiy Dubois·24 Feb 2025

Outil fantastique

Kyng Anderson·22 Feb 2025

Je la recommande vivement à tous ceux qui passent beaucoup de temps en ligne.

Jayleen Zapata·21 Feb 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

EasyNav

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating