Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Eclipse dark theme

CRITICAL RISKRemoved from Chrome Web Store

Eclipse dark theme

ID: ekkbggemkbjkphmeegnkfcjfihdknfdd

Could be malicious

Extension Info & Metadata

Status

Removed

Version

0.4.3

Size

0.55 MB

Rating

2.5/5

Reviews

Users

503,896

Type

Extension

Updated

Oct 20, 2020

Publisher Contextual Analysis

Author: Kathi WrightView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

503,896

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Eclipse is a neat dark theme for websites

Eclipse is a dark theme extension that works on many popular sites. If you turn on OS and browser dark mode, try it out to complete your experience. ❇️ Curated dark styles for popular websites ❇️ Blacklist website if it’s broken ❇️ Yellow tint enabled at night (You can disable it)

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High0

Medium3

Low3

Versions scanned

Showing 2 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.4.2 Code review	3
0.4.1 Code review	3

Extension Version	Code Review Findings
0.4.2	3
0.4.1	3

Files with findings

5 distinct paths — top paths by unique finding count:

inject.js2
css/google.css1
css/twitch.css1
css/whatsapp.css1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Other	medium	manifest.json (line 11)	The extension injects `moment.js` (a 4,601-line date library) as a content script into every single page at `document_start`, yet `inject.js` never calls any moment.js API — it uses vanilla `new Date()` for all time c…	0.4.1
2	Tracking	medium	css/twitch.css (line 258)	This injected stylesheet forces the browser to fetch an image from an unrelated third-party domain over plain HTTP whenever the Twitch theme is applied. That creates an unnecessary external beacon tied to page visits,…	0.4.2
3	Tracking	medium	inject.js (line 108)	This `DOMContentLoaded` listener adds the class `__fb-dark-mode` to `document.body` on every page the user visits — not just facebook.com — because the code only skips the operation when "facebook.com" is actively in …	0.4.1
4	Tracking	low	css/whatsapp.css (line 1)	The extension's injected WhatsApp stylesheet references an external image hosted on `raw.githubusercontent.com` instead of packaging the asset locally. Every affected page load can therefore generate a third-party req…	0.4.2
5	Tracking	low	css/google.css (line 3416)	This stylesheet pulls a cursor image from `i.imgur.com` for an injected Google page theme. Using third-party hosted assets inside content-injected CSS is a suspicious pattern because it creates off-platform requests t…	0.4.2
6	Unauthorized Data Collection	low	inject.js (line 208)	`blacklist` is assigned at line 114 and line 213 without any `var`, `let`, or `const` declaration, making it an implicit global variable on `window`. Because this content script runs on `<all_urls>` the page's own Jav…	0.4.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

155

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


chrome.google.com	-	https://chrome.google.com
www.googletagmanager.com	/gtm.js	https://www.googletagmanager.com/gtm.js?id=GTM-54NT8GW&l=
getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/master/LICENSE	https://github.com/twbs/bootstrap/blob/master/LICENSE
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
github.com	/liorgrossman/darkness/tree/master/chrome-extension/themes	https://github.com/liorgrossman/darkness/tree/master/chrome-extension/themes
userstyles.org	/styles/126925/bing-dark	https://userstyles.org/styles/126925/bing-dark
colincon.ga	-	http://colincon.ga
userstyles.org	/styles/101431/new-duckduckgo-dark-theme	https://userstyles.org/styles/101431/new-duckduckgo-dark-theme
userstyles.org	/styles/120329/ebay-dark-black-midnight-smacked	https://userstyles.org/styles/120329/ebay-dark-black-midnight-smacked

Showing 1 to 10 of 160 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-
4.4.3.2	IPv4	-

4.0 out of 5 · 1 most recent review

Text reviews

Positive

Negative

i love it but there is one issue when i disable the yellow tint nothing happen can you please fix it.

iBadr·8 Oct 2020

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Eclipse dark theme

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 3 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews