Chrome Web Store

161Versions

1Code reviewed

No malware found

In code review (v1.6.315)

Our reviewer read version 1.6.315 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Everhour — Time Tracking, Budgets, Expenses, used by 100,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in September 2026.

Analyst notes

The extension is a well-known time tracking tool (Everhour) with 90k users and a trusted publisher. The provided source code shows only legitimate integration scripts that extract IDs from supported project management sites to embed time tracking controls. All network requests target the publisher's own domains ([domain withheld], [domain withheld], [domain withheld]) and there is no obfuscation or suspicious data exfiltration. The permissions and host access are necessary for the extension's core functionality, and no malicious behavior was found in the reviewed files.

Everhour — Time Tracking, Budgets, Expenses Chrome extension security report

ID: dnebklifojaaecmheejjopgjdljebpeo

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Active

Version

1.6.334

Size

11.37 MB

Rating

4.1/5

Reviews

Users

100,000

Type

Extension

Updated

Sep 30, 2026

Publisher Contextual Analysis

Trusted

Author: everhour.com
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

100,000

Screenshots & videos

Install growth

User Growth

Showing data from Sep 10, 2023 to Sep 08, 2024

Versions

+11.11%(+10,000 users)

Compared to 3 months ago

49 versions released in this period

Rating Count

Total: 73 ratings

Average Rating

Current: 4.29 / 5.0+0.04

React Flow

Internal permhash`6b1d409129…`
No malicious matches

No other extension carries this fingerprint.

Permhash (Mandiant)`80191129c2…`
No malicious matches

No other extension carries this fingerprint.

Item	Type	Severity	Description
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk: • 19% increase: Access to sensitive domains increases potential impact
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
declarativeContent	Permission	Medium	This permission controls extension activation based on page content. Rated Medium because it can monitor page content matches and selectively activate extension features.
https://api.everhour.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://api-ro.everhour.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://rest.ably.io/*	Host	Medium	Host permission — access limited to this URL pattern.
https://app.everhour.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://trello.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://app.asana.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://basecamp.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://3.basecamp.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://github.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://gitlab.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://www.pivotaltracker.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://www.pivotaltracker.com/n/*	Host	Medium	Host permission — access limited to this URL pattern.
https://app.clickup.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://crm.na1.insightly.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://crm.na2.insightly.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://crm.na3.insightly.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://bitbucket.org/*	Host	Medium	Host permission — access limited to this URL pattern.
Access to Sensitive Domains	Risk Factor	Medium	This extension requests access to sensitive domains: https://github.com/, https://gitlab.com/, https://bitbucket.org/*
idle	Permission	Low	This permission detects system idle state. Rated Low because it only observes user activity state without access to activity details.

Sensitive Domain Access

This extension has access to the following sensitive domains:

https://github.com/*
https://gitlab.com/*
https://bitbucket.org/*

About this extension

Accurate employee time tracking software for reporting, invoicing and payroll.

Read the publisher’s full description

Everhour integrates with a number of project management tools by means of a browser extension, that lets you easily start a timer or log time manually. We embed time tracking controls inside their interface as if they are native functionality. So, no more tab switching. Everhour is not only a browser add-on. Sign in to Everhour from the web browser for access to more features like projects budgeting, resources planning, expenses tracking, detailed reports and client invoices.

User reviews

3.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

I want to use the chrome extension so I can log time in Clickup but there is a persistent popup that will not go away so I cannot use the chrome plugin. Very annoying.

Heidi Margulius·2 Sept 2026

After the latest UI refresh of linear (https://linear.app/changelog/2026-03-12-ui-refresh) the the embedded timer in Linear stop showing

Iraklis·13 Mar 2026

Everhour currently advertises a free plan on their pricing page, which is why I chose them. After two weeks of use, my account was locked and I was told I had to upgrade to continue. This feels dishonest and like false advertising. If the free plan isn’t actually free, Everhour should clearly state that instead of misleading users.

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version	Size	Verdict	Findings	Permhash
1.6.334 Latest	11.37 MB	Not scanned	—	80191129c249b63701b32bb63500339f644281a61964f4ced49223e8428fa2e1
1.6.333	11.37 MB	Not scanned	—	80191129c249b63701b32bb63500339f644281a61964f4ced49223e8428fa2e1
1.6.332	11.36 MB	Not scanned	—	80191129c249b63701b32bb63500339f644281a61964f4ced49223e8428fa2e1
1.6.331	11.36 MB	Not scanned	—	80191129c249b63701b32bb63500339f644281a61964f4ced49223e8428fa2e1
1.6.330	11.36 MB	Not scanned	—	80191129c249b63701b32bb63500339f644281a61964f4ced49223e8428fa2e1
1.6.329	11.36 MB	Not scanned	—	80191129c249b63701b32bb63500339f644281a61964f4ced49223e8428fa2e1
1.6.328	11.36 MB	Not scanned	—	80191129c249b63701b32bb63500339f644281a61964f4ced49223e8428fa2e1
1.6.327	11.36 MB	Not scanned	—	80191129c249b63701b32bb63500339f644281a61964f4ced49223e8428fa2e1
1.6.300	11.34 MB	Not scanned	—	80191129c249b63701b32bb63500339f644281a61964f4ced49223e8428fa2e1
1.6.301	11.35 MB	Not scanned	—	80191129c249b63701b32bb63500339f644281a61964f4ced49223e8428fa2e1

Showing 1 to 10 of 170 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Workflow & Planning

Application Launcher For Drive (by Google)99,000,000 users
Chrome Remote Desktop41,000,000 users
Microsoft Single Sign On37,000,000 users
Free VPN for Chrome - VPN Proxy VeePN15,000,000 users
PrinterLogic Extension v1.0.6.113,000,000 users

No malware found

What our analysis found