Chrome Web StoreCaution required
Suspicious in code review (v1.1)
Our reviewer found behaviour consistent with malware in version 1.1, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
5 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Find The Recipe, used by 10,000 people, is rated caution by Extension Auditor. Our code review reported 2 findings (1 high, 1 medium), led by other. It comes from a trusted publisher and was last updated in November 2024.
Key findings
- High
Other
The bundled manifest requests an extra host permission, *://[domain withheld], that the published CWS manifest summary does not list (it shows only [domain withheld]). A permission present in the shipped package but absent from the published listing is a divergence and the kind of discrepancy a delayed-malicious update produces. In this package the grant is inert - there are no content_scripts, no scripting or webRequest permission and no code that contacts [domain withheld] - and it is consistent with the listing text "Sets Yahoo as the default search settings", so it is reported as a manifest mismatch rather than observed abuse.
- Medium
Other
The extension takes over the browser default search engine (is_default: true) but registers it under the generic display name "Web", so Chrome's search-settings UI gives the user no indication that "Find The Recipe" is the party now receiving their address-bar queries. The deception is in the chosen label, not in the redirect itself: the search change is disclosed in the store description, while the name that would let a user find and revert it is not. This is reinforced by, which at install time (:10 replaces the active tab) pressures the user to pin "RecipesStash" - a different product name than the extension they installed.
Analyst notes
The whole extension is ~2.5 KB of first-party JavaScript (,,) plus stock jQuery: it declares a default search provider at:10-20 and funnels input into chrome.search.query (:25-30,:3-11). There is no content script, no permission, no, no eval or Function, no obfuscation and no remote code loading, so the ML score (driven entirely by structural counters - totals, and 89,151 JS bytes of which ~86 KB is jquery.) is not evidence of malicious behaviour and the two css_import hits are Google Fonts @imports in:2 and:1. What keeps this above benign is code-level deception rather than the context: the override is registered under the generic name "Web" (:16) so Chrome's search settings never show "Find The Recipe"; ships a different product name ("Pin RecipesStash", "Click the RecipesStash icon"), the signature of a templated search-monetisation family;:10 navigates the user's active tab away at install time; and every address-bar query plus per-keystroke suggest traffic reaches [domain withheld] while the CWS data-collection disclosure is "none declared" (that destination is first-party and the search change is disclosed in the listing, so I log it as a disclosure gap, not an exfiltration finding). chrome-stats ( impact) and our own risk engine (0.12) contradict the ML verdict; the permhash cluster (33% flagged), publisher reputation ( malicious, flagged) and the feed label corroborate it, but I weigh them only as context. Confidence is medium because jquery. and are listed in yet absent from the extracted bundle, so I could not verify jQuery is unmodified.
Find The Recipe Chrome extension security report
ID: naaffooocnnodpcmppdjhpjiogkljkch
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- VPP Technologies L.L.C.
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
5 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Find the recipes in the browser action modal or browser address bar.
Read the publisher’s full description
"Find the Recipes” extension updates the browser search provider and allows users to get results for Recipes. How to search for Recipes? 1.Type "Recipes" in the browser address bar and press "space" or "Tab" on your keyboard. 2.Input the search keyword and press "Enter" You may also search for recipes by clicking on the extension icon on the browser and use the input box in the extension Modal. Easily get access to web search and recipes search with this extension. This extension updates your browser default search in the following ways: 1. Allows for recipes search directly from your browser address bar 2. Sets Yahoo as the default search settings in your browser By installing this extension, you agree to the Terms of Use (https://findtherecipe.com/terms.html) and Privacy Policy (https://findtherecipe.com/privacy.html) List of Features: - Perform Recipes search in your omnibox and browser action modal - Perform Web Searches in your omnibox and browser action modal Permissions used and reason: Change your search settings Our keyword search features uses this to work in the Omnibar Search powered by Yahoo
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
5 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from VPP Technologies L.L.C.
- Recipes Stash10,000 users
- Switch My Search10,000 users
- Flex Search Engine9,000 users
- Day PLan Search2,000 users
- Quick Engine Switch10 users
Popular in Household
- Copy Me That50,000 users
- Jungle Scout: Extension Lite10,000 users
- Print Recipes10,000 users
- SimpleUndoClose10,000 users