Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Glo3d Facebook Manager

CRITICAL RISKRemoved from Chrome Web Store

Glo3d Facebook Manager

ID: iknbcbaocjaefdhcfjdbjcjbjgehfikn

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

2.9.2

Size

2.21 MB

Rating

5.0/5

Reviews

Users

169

Type

Extension

Updated

Oct 25, 2024

Publisher Contextual Analysis

Author: glo3d.extentionView Profile
Privacy: Privacy Policy
Help: Help Center
Country: CA
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: 8 Westmount Park Road Toronto, ON M9P 1R5 CA

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

228

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Glo3d Facebook Manager

This Extension is ONLY useful for Glo3D.com customers. It will help you automatically post your inventory to your facebook market place account. This is a FREE extension for all Glo3D customers. Enjoy!

User Growth

Showing data from Nov 28, 2023 to Nov 10, 2025

Versions

-6.53%(-13 users)

Compared to 3 months ago

36 versions released in this period

Rating Count

Total: 2 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium3

Low1

Versions scanned

Showing 1 of 36 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.3.0 Code review	5

Extension Version	Code Review Findings
2.3.0	5

Files with findings

4 distinct paths — top paths by unique finding count:

app/extension/content-script/scheduler.js2
app/extension/content-script/content-script.js1
app/extension/content-script/get-data.js1
app/extension/content-script/upload-images.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	high	app/extension/content-script/scheduler.js (line 50)	The scheduler accepts a JSON object from the remote endpoint (response.data) and feeds it directly into the Post() pipeline, which then drives DOM clicks, fills form fields, and triggers image uploads on facebook.com …	2.3.0
2	Privilege Escalation	medium	app/extension/content-script/upload-images.js (line 3)	Image URLs supplied by the remote glo3d server are fetched and synthetically injected into Facebook's file input via DataTransfer plus a dispatched 'change' event, simulating a real user upload. This automated form-su…	2.3.0
3	Tracking	medium	app/extension/content-script/scheduler.js (line 37)	Every 60 seconds the content script polls a third-party Firebase Cloud Functions endpoint, sending the scraped Facebook username as a query parameter and a Basic-Auth token previously injected via runtime message. Thi…	2.3.0
4	Unauthorized Data Collection	medium	app/extension/content-script/get-data.js (line 10)	Scrapes the user's Facebook display name from a deeply-nested, intentionally fragile DOM path (data-visualcompletion='ignore-dynamic') and the user's location from the Marketplace UI, then forwards both to the extensi…	2.3.0
5	Credential Theft	low	app/extension/content-script/content-script.js (line 1)	The popup passes a base64-encoded credential ('btoa') into the content script via runtime message, which is then attached as a Basic Authorization header on every outbound fetch to the glo3d backend. Storing/forwardin…	2.3.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.amcharts.com	/docs/v5/concepts/cors	https://www.amcharts.com/docs/v5/concepts/cors
www.amcharts.com	-	https://www.amcharts.com/
www.apache.org	/licenses/	http://www.apache.org/licenses/
www.apache.org	/licenses/LICENSE-2.0	http://www.apache.org/licenses/LICENSE-2.0
angular.io	/license	https://angular.io/license
www.facebook.com	/login	https://www.facebook.com/login
us-central1-glo3d-c338b.cloudfunctions.net	/fbMarketplaceApi/v2/users-credentials%60,	https://us-central1-glo3d-c338b.cloudfunctions.net/fbMarketplaceApi/v2/users-credentials`,
www.facebook.com	/two_step_verification/two_factor	https://www.facebook.com/two_step_verification/two_factor
www.facebook.com	/marketplace/	https://www.facebook.com/marketplace/?ref=bookmark
us-central1-glo3d-c338b.cloudfunctions.net	/fbMarketplaceApi/v2/status/	https://us-central1-glo3d-c338b.cloudfunctions.net/fbMarketplaceApi/v2/status/

Showing 1 to 10 of 60 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


4.4.3.2	IPv4	-

5.0 out of 5 · 3 most recent reviews

Text reviews

Positive

Negative

Such a great tool to save me time.

M Mirzaei H (Max)·6 Mar 2024

Amazing extension! Helps a lot

Juliana Faria·23 Jan 2024

Works great, saves me time!

Keian Amina·17 Jan 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Glo3d Facebook Manager

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 36 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating