Chrome Web Store

20Versions

1Code reviewed

Caution required

Suspicious in code review (v0.1.15)

Our reviewer found behaviour consistent with malware in version 0.1.15, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

187 indicators in this extension

187 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

What our analysis found

EasyPubMedicine, used by 100,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in July 2026.

Key findings

High
Other
The published Chrome Web Store manifest includes the 'debugger' permission and host permission for '[domain withheld]' which are not present in the bundled. This mismatch suggests the live extension may have been updated with high-risk capabilities not reflected in the reviewed version, potentially enabling interception of sensitive data or remote code execution.

Analyst notes

The extension provides legitimate PubMed utility features, but the live Chrome Web Store listing includes the 'debugger' permission and '[domain withheld]' host permission that are absent from the bundled, indicating a possible delayed malicious update. Critical source files (,) are missing from the provided bundle, preventing full verification of data collection and network behavior. The ML risk score is low, and user ratings are good, but the permission mismatch raises significant suspicion.

EasyPubMedicine Chrome extension security report

ID: nkpdpmomjhifdobiopmgfjjffacldfje

Extension Info & Metadata

Status

Active

Version

0.1.24

Size

13.23 MB

Rating

4.7/5

Reviews

Users

100,000

Type

Extension

Updated

Jul 20, 2026

Publisher Contextual Analysis

Trusted

Author: EasyPubMed
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

100,000

Screenshots & videos

Install growth

User Growth

Showing data from Sep 10, 2023 to Sep 08, 2024

Versions

No change in user count

Compared to 3 months ago

5 versions released in this period

Rating Count

Total: 83 ratings

Average Rating

Current: 4.84 / 5.0-0.03

See plans

React Flow

Internal permhash`232c77ae0c…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Permhash (Mandiant)`438bcad460…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Network indicators

186 URLs and 1 IP literals were extracted from this version.

Item	Type	Severity	Description
declarativeNetRequest	Permission	Critical	This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
debugger	Permission	Critical	This permission grants the extension ability to debug and control other extensions and browser tabs. Rated Critical because it can access and modify other extensions' internal state, inject code, and access sensitive data from any tab.
downloads	Permission	High	This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
clipboardRead	Permission	High	This permission allows reading clipboard content. Rated High because it can steal copied passwords, sensitive data, and monitor all content copied to clipboard.
clipboardWrite	Permission	High	This permission allows modification of clipboard content. Rated High because it can inject malicious content into the clipboard, modify copied passwords, and manipulate copied data.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
unlimitedStorage	Permission	Medium	This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://www.sci-hub.st/	Host	Medium	Host permission — access limited to this URL pattern.
https://www.sci-hub.se/	Host	Medium	Host permission — access limited to this URL pattern.
https://www.sci-hub.ru/	Host	Medium	Host permission — access limited to this URL pattern.
https://sci-hub.st/	Host	Medium	Host permission — access limited to this URL pattern.
https://sci-hub.se/	Host	Medium	Host permission — access limited to this URL pattern.
https://sci-hub.ru/	Host	Medium	Host permission — access limited to this URL pattern.
https://sci-hub.ee/	Host	Medium	Host permission — access limited to this URL pattern.
https://sci-hub.do/	Host	Medium	Host permission — access limited to this URL pattern.
https://sci-hub.ren/	Host	Medium	Host permission — access limited to this URL pattern.
https://sci-hub.cc/	Host	Medium	Host permission — access limited to this URL pattern.
https://sci-hub.tw/	Host	Medium	Host permission — access limited to this URL pattern.
https://sci-hub.wf/	Host	Medium	Host permission — access limited to this URL pattern.
https://sci-hub.shop/	Host	Medium	Host permission — access limited to this URL pattern.
http://libgen.gs/	Host	Medium	Host permission — access limited to this URL pattern.
https://cn.bing.com/dict/	Host	Medium	Host permission — access limited to this URL pattern.
https://translate.google.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://translate.google.cn/	Host	Medium	Host permission — access limited to this URL pattern.
https://gitee.com/easypubmed/easypubmed/	Host	Medium	Host permission — access limited to this URL pattern.
https://www.ncbi.nlm.nih.gov/	Host	Medium	Host permission — access limited to this URL pattern.
https://www.deepl.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://api.openai.com/	Host	Medium	Host permission — access limited to this URL pattern.
://.qq.com/	Host	Medium	Host permission — access limited to this URL pattern.
://.deepl.com/	Host	Medium	Host permission — access limited to this URL pattern.
://.google.com/*	Host	Medium	Host permission — access limited to this URL pattern.
://.ncbi.nlm.nih.gov/*	Host	Medium	Host permission — access limited to this URL pattern.
file:///	Host	Medium	Host permission — access limited to this URL pattern.
http://lx2.loc.gov/	Host	Medium	Host permission — access limited to this URL pattern.
://.amazon.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://easypubmed.vercel.app/	Host	Medium	Host permission — access limited to this URL pattern.
https://pubmed.ncbi.nlm.nih.gov/	Host	Medium	Host permission — access limited to this URL pattern.
https://lingocloud.cyapi.cn/	Host	Medium	Host permission — access limited to this URL pattern.
Access to Sensitive Domains	Risk Factor	Medium	This extension requests access to sensitive domains: https://cn.bing.com/dict/, https://translate.google.com/, https://translate.google.cn/, ://.google.com/, ://.amazon.com/, https://lingocloud.cyapi.cn/
downloads.open	Permission	Low	This permission opens downloaded files. Rated Low because it can only open files after explicit user download and selection.
contextMenus	Permission	Low	This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

Sensitive Domain Access

This extension has access to the following sensitive domains:

https://cn.bing.com/dict/
https://translate.google.com/
https://translate.google.cn/
*://*.google.com/*
*://*.amazon.com/*
https://lingocloud.cyapi.cn/

187 indicators in this extension

187 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

About this extension

EasyPubMedicine makes PubMed easy to use

Read the publisher’s full description

EasyPubMedicine使新版PubMed更好用! EasyPubMedicine makes new PubMed easier to use! 更新： - 更新最新2025年中科院、JCR分区 - 展示近五年IF趋势 - 文献管理助手支持参考文献及附件备份与加载 - 一键截屏PubMed网站头部信息 - 增加可国内访问的scihub网址功能特色：专为新版PubMed设计的工具条——看摘要、找全文、收藏文献都不是问题 - 一键点击从UnpayWall、Sci-Hub多渠道获取全文PDF，找全文如此简单 - 一键收集PubMed文章，好文献随时收藏并支持做多种标记，如星价、旗标、贴标签、写备注 - 展示最新（2025年）杂志影响因子、JCR分区、中科院分区及文章被引用次数 - 获取文章10000+种参考文献引用格式，覆盖绝大多数SCI杂志 - PubMed搜索界面展示完整摘要文献管理助手——浏览器就能把文献管理得井井有条 - 文献分项目管理 - 全文PDF批量下载 - 全文PDF自动重命名，乱码文件名从此消失 - 文献附件（Supplementary Material）管理，文献附件也保存得井井有条强大翻译功能——翻译竟然这么方便，文献阅读再没烦恼 - 支持六种翻译引擎 - 一键翻译PubMed文章标题及摘要 - 实时英文翻译 = 选中文字+“T”键/“D”键 - 网页PDF随时翻译=“Ctrl+C”键+“Add Text" 文献筛选助手——筛选高质量文献如此简单 - 支持根据杂志影响因子、分区、被引用次数等6种模式筛选文献 - PubMed杂志筛选助手帮你筛选高质量杂志文献探测器 - 在所有网页探测文献标志号如DOI、PMID、ARXIVID、ISBN，可在侧边栏直接链接到文章全文通过Edge及Chrome商店审查，安全放心 Update: - Latest JCR impact factor(2025) - Display trend chart of IF over the past five years - One click to capturePubMed header screenshot - Disable Sci-hub if you want - Detect paper identifier and display impact factor in any webpage - Bug fixation - Support Manifest v3 Features: -EasyPubMedicine tool bar, Design for new PubMed - One click to get PDF from UnpayWall, Sci-Hub, Libgen - One click to collect PubMed article to Reference Manager - Display journal impact factor (IF), JCR (Journal Citation Reports) journal's quartile ranking or CAS (Chinese Academy of Sciences) journal's block ranking - Get 1000+ reference style - Display abstract in PubMed search page -Reference Manager - Classify reference to different project - Batch download and rename full-text PDF - Manage supplemental material -Translation - One click to translate article's title and abstract in PubMed - Webpage translation: select the words and Press "T" - PDF translation - Multiple languages support -Journal Filter Tools - Filter articles by Impact factor, JCR Quartile and citation counts... - PubMed filter manager helps you select most related journals in your research field - Paper Identifier Detector - Detect paper identifier such as DOI, PMID, ARXIVID, ISBN and show full-text link in side-bar

User reviews

3.9 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

The best!

zhou long·26 Aug 2026

Fabulous and I love it

Lee DC·23 Jun 2026

legendary

Eugene Lee·19 Jan 2026

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

186

IPv4

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

187 indicators in this extension

187 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

Version	Size	Verdict	Findings	Permhash
0.1.24 Latest	13.23 MB	Not scanned	—	438bcad460449b8ceb78212ade6e6a3b23b720902d2d8cb83523a5b03dd841ae
0.1.21	8.17 MB	Not scanned	—	438bcad460449b8ceb78212ade6e6a3b23b720902d2d8cb83523a5b03dd841ae
0.1.20	8.15 MB	Not scanned	—	438bcad460449b8ceb78212ade6e6a3b23b720902d2d8cb83523a5b03dd841ae
0.1.19	8.34 MB	Not scanned	—	438bcad460449b8ceb78212ade6e6a3b23b720902d2d8cb83523a5b03dd841ae
0.1.17	6.49 MB	Not scanned	—	ad295df983067b9afc8e0df9a17faca7dcdb77d98bed7919356a8001b5924d23
0.1.16	6.47 MB	Not scanned	—	ad295df983067b9afc8e0df9a17faca7dcdb77d98bed7919356a8001b5924d23
0.1.15	6.47 MB	Caution	0	ad295df983067b9afc8e0df9a17faca7dcdb77d98bed7919356a8001b5924d23
0.1.14	6.76 MB	Not scanned	—	8fac15ebe0ce9ae99524b1ffa962465f170c26f68157a80663372984593d4451
0.1.13	6.76 MB	Not scanned	—	8fac15ebe0ce9ae99524b1ffa962465f170c26f68157a80663372984593d4451
0.1.12	5.97 MB	Not scanned	—	b4dbd1c82e4bf766ba0f7474e856c8c2d64b51548b86a79076d33190356fe3ca

Showing 1 to 10 of 20 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Tools

Montara Chrome Extension639,000,000 users
迅雷下载支持84,000,000 users
Claude18,000,000 users
Passlit Openbook10,000,000 users
Zotero Connector9,000,000 users

Caution required

187 indicators in this extension

What our analysis found

Key findings

Other

EasyPubMedicine Chrome extension security report

Extension Info & Metadata

Publisher Contextual Analysis

Screenshots & videos

Install growth

User Growth

Rating Count

Average Rating

Threat relationships

Internal permhash232c77ae0c…No malicious matches

Permhash (Mandiant)438bcad460…No malicious matches

Network indicators

Security analysis

Manifest File Security Analysis

Sensitive Domain Access

187 indicators in this extension

Store listing & files

About this extension

User reviews

User Reviews

Extension files

Network indicators

URLs

187 indicators in this extension

Versions & changes

Version History

Code Diff

Related extensions

Popular in Tools

User Growth

Rating Count

Average Rating

User Reviews

Threat relationships

Internal permhash232c77ae0c…No malicious matches

Permhash (Mandiant)438bcad460…No malicious matches

Network indicators

Internal permhash`232c77ae0c…`
No malicious matches

Permhash (Mandiant)`438bcad460…`
No malicious matches

Internal permhash`232c77ae0c…`
No malicious matches

Permhash (Mandiant)`438bcad460…`
No malicious matches