Expense Tracker Tab

Expense Tracker Tab

ID: eajjlonhjchffdcafkfkaggnfafnlhng

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.0.1
Size
0.47 MB
Rating
5.0/5
Reviews
2
Users
2,000
Type
Extension
Updated
Feb 8, 2024
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes

Publisher Contextual Analysis

Trusted
Author
Carbonatix LTDView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Total Extensions
9
Active
1
Obsolete
8
Listed
9
Unlisted
0
Total Users
35,036
Screenshot 1
Screenshot 2

Expense Tracker Tab - Simplify expense tracking and budget management

Expense Tracker Tab: Your Personal Expense Tracker for New Tab! Take control of your finances like never before with Expense Tracker Tab. You can effortlessly monitor and analyze your expenses right from your open a new tab, simply add all the expenses and . Don't let your finances overwhelm you. Take charge of your spending and achieve financial freedom with Expense Tracker Tab. Download the extension today and transform your new tab into a powerful expense tracking hub. Your financial journey starts now! By clicking "Add to chrome", I accept and agree to installing the: Expense Tracker Tab extension and setting chrome new tab search provider to Microsoft Bing as described by the service in terms of use https://expensetrackertab.com/terms and Privacy Policy https://expensetrackertab.com/privacy This extension is free to download from the Chrome Web store, and you can uninstall it at any time. Terms of Use - https://expensetrackertab.com/terms Privacy Policy - https://expensetrackertab.com/privacy About - https://expensetrackertab.com/about

This extension requests no permissions and has no recorded risk factors.

The new-tab override page contains a search form whose action points to the publisher's own domain `expensetrackertab.com`, silently replacing the user's default search engine with a Bing affiliate redirect. While technically disclosed in the CWS listing description, this is the identical search-hijacking monetisation pattern used by Carbonatix across all of their other extensions — every one of which is flagged malicious. The functional value (expense tracking) appears to be a pretext for capturing new-tab search traffic and routing it through a paid referral link.

index.html (Line 36)
<form action="https://expensetrackertab.com" method="GET" class="search-bar">  <input type="text" name="q" placeholder="Search" />  <button class="submit" type="submit">    <img src="icons/search.png" />  </button></form>

By severity

Critical0
High0
Medium1
Low0

Versions scanned

None of the 2 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path — top paths by unique finding count:

  • index.html1
S.No.
Category
Severity
File
Summary
Found in Version
1Other
medium
index.html (line 36)The new-tab override page contains a search form whose action points to the publisher's own domain `expensetrackertab.com`, silently replacing the user's default search engine with a Bing affiliate redirect. While tec…
URLs
86
IPv4
2
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

expensetrackertab.com/thankyouhttps://expensetrackertab.com/thankyou
www.jsdelivr.com/using-sri-with-dynamic-fileshttps://www.jsdelivr.com/using-sri-with-dynamic-files
www.chartjs.org-https://www.chartjs.org
github.com/kurkle/colorhttps://github.com/kurkle/color#readme
jquery.com-https://jquery.com/
jquery.org/licensehttps://jquery.org/license
github.com/whatwg/html/issues/2369https://github.com/whatwg/html/issues/2369
html.spec.whatwg.org-https://html.spec.whatwg.org/#nonce-attributes
drafts.csswg.org/cssom/https://drafts.csswg.org/cssom/#common-serializing-idioms
www.w3.org/TR/css-syntax-3/https://www.w3.org/TR/css-syntax-3/#ident-token-diagram
Showing 1 to 10 of 90 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

2.3.3.3
IPv4
-
2.3.3.1
IPv4
-
Version
Size
Is Malicious
Findings
Permhash
1.0
Latest
0.46 MB
Benign
—
1.0.1
0.47 MB
Malicious
1N/A
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.