Gmail Dark Mode

Gmail Dark Mode

ID: mkalmijolbkbcnjgkjkljadedgjlcpgm

Supported Languages

๐Ÿ‡ช๐Ÿ‡นAmharic
๐Ÿ‡ธ๐Ÿ‡ฆArabic
๐Ÿ‡ง๐Ÿ‡ฉBengali
๐Ÿ‡ง๐Ÿ‡ทBrazilian Portuguese
๐Ÿ‡ง๐Ÿ‡ฌBulgarian
๐Ÿ‡ช๐Ÿ‡ธCatalan
๐Ÿ‡จ๐Ÿ‡ณChinese (Simplified)
๐Ÿ‡น๐Ÿ‡ผChinese (Traditional)
๐Ÿ‡ญ๐Ÿ‡ทCroatian
๐Ÿ‡จ๐Ÿ‡ฟCzech
๐Ÿ‡ฉ๐Ÿ‡ฐDanish
๐Ÿ‡ณ๐Ÿ‡ฑDutch
๐Ÿ‡บ๐Ÿ‡ธEnglish
๐Ÿ‡ช๐Ÿ‡ชEstonian
๐Ÿ‡ต๐Ÿ‡ญFilipino
๐Ÿ‡ซ๐Ÿ‡ฎFinnish
๐Ÿ‡ซ๐Ÿ‡ทFrench
๐Ÿ‡ฉ๐Ÿ‡ชGerman
๐Ÿ‡ฌ๐Ÿ‡ทGreek
๐Ÿ‡ฎ๐Ÿ‡ณGujarati
๐Ÿ‡ฎ๐Ÿ‡ฑHebrew
๐Ÿ‡ฎ๐Ÿ‡ณHindi
๐Ÿ‡ญ๐Ÿ‡บHungarian
๐Ÿ‡ฎ๐Ÿ‡ฉIndonesian
๐Ÿ‡ฎ๐Ÿ‡นItalian
๐Ÿ‡ฏ๐Ÿ‡ตJapanese
๐Ÿ‡ฎ๐Ÿ‡ณKannada
๐Ÿ‡ฐ๐Ÿ‡ทKorean
๐Ÿ‡ฒ๐Ÿ‡ฝLatin American Spanish
๐Ÿ‡ฑ๐Ÿ‡ปLatvian
๐Ÿ‡ฑ๐Ÿ‡นLithuanian
๐Ÿ‡ฒ๐Ÿ‡พMalay
๐Ÿ‡ฎ๐Ÿ‡ณMalayalam
๐Ÿ‡ฎ๐Ÿ‡ณMarathi
๐Ÿ‡ณ๐Ÿ‡ดNorwegian
๐Ÿ‡ฎ๐Ÿ‡ทPersian
๐Ÿ‡ต๐Ÿ‡ฑPolish
๐Ÿ‡ต๐Ÿ‡นPortuguese
๐Ÿ‡ท๐Ÿ‡ดRomanian
๐Ÿ‡ท๐Ÿ‡บRussian
๐Ÿ‡ท๐Ÿ‡ธSerbian
๐Ÿ‡ธ๐Ÿ‡ฐSlovak
๐Ÿ‡ธ๐Ÿ‡ฎSlovenian
๐Ÿ‡ช๐Ÿ‡ธSpanish
๐Ÿ‡ฐ๐Ÿ‡ชSwahili
๐Ÿ‡ธ๐Ÿ‡ชSwedish
๐Ÿ‡ฎ๐Ÿ‡ณTamil
๐Ÿ‡ฎ๐Ÿ‡ณTelugu
๐Ÿ‡น๐Ÿ‡ญThai
๐Ÿ‡น๐Ÿ‡ทTurkish
๐Ÿ‡บ๐Ÿ‡ฆUkrainian
๐Ÿ‡ป๐Ÿ‡ณVietnamese

Extension Info & Metadata

Status
Removed
Version
4.9.53
Size
0.53 MB
Rating
4.0/5
Reviews
29
Users
9,000
Type
Extension
Updated
May 6, 2024
Category
Make_chrome_yours Accessibility
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No

Publisher Contextual Analysis

MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
3
Active
0
Obsolete
3
Listed
3
Unlisted
0
Total Users
18,363
Screenshot 1

Introducing Gmail Dark Mode - an elegant solution for managing your email during nighttime or prolonged usage

๐ŸŒ™ Glow with gmail dark mode: Experience the sleek comfort of email black mode, a must-have for nightly users. Whether working late or checking emails before bed, gmail dark mode ensures a stress-free environment. Reduce glare and embrace a user-friendly interface for relaxed eyes. ๐Ÿ–ค Unveiling a New Visual Vibe: 1๏ธโƒฃ Instantly transform your email with stylish, easier-to-read dark mode. 2๏ธโƒฃ Gmail dark mode enhances ergonomics and conserves mobile battery. 3๏ธโƒฃ A black gmail theme modernizes mundane email interactions. ๐Ÿ“ˆ Boost Productivity at All Hours: Gmail night mode is perfect for late nights or early mornings. Darkened theme mail optimizes workspace, reducing eye strain and overwhelming brightness. Effortlessly toggle between modes depending on your needs or time of day with our intuitive design. ๐ŸŒ‘ Dark mode for Gmail isn't merely a trend but a necessity in today's digital landscape: ๐Ÿ–ฅ๏ธ It transcends style, offering practical benefits for user comfort and preference. ๐Ÿ–ฅ๏ธ With customizable options, users can tailor their Gmail experience to suit their individual needs. ๐Ÿ–ฅ๏ธ Whether it's reducing screen-induced eye fatigue during extended usage or adapting seamlessly to various lighting environments, such as a dimly lit room or a brightly illuminated office setting. ๐Ÿ‘๏ธโ€๐Ÿ—จ๏ธ Personalize Your Email Experience: ๐Ÿ“ŒOpt for Gmail's dark theme for enhanced comfort and readability. ๐Ÿ“ŒGmail black adds elegance, providing a sophisticated email setting. ๐Ÿ“Œ Dark mode on the messaging platform enhances productivity and user experience. ๐Ÿ’ผ Professional Touch with Dark Themes: โžค Gmail darkened mode suits all professional settings, lessening the harshness of traditional bright screens. โžค Dark Gmail enhances productivity and provides an excellent email backdrop. โžค Engage more effectively with email content without the distraction of a bright interface. ๐Ÿ”—Transition to Gmail's black mode seamlessly with a one-click activation process: Our Chrome extension ensures every aspect of your Gmail interface aligns with the dark theme settings. Experience consistent visual relief across all devices as mail black mode synchronizes effortlessly. Enjoy uninterrupted comfort and readability with the soothing dark palette. ๐ŸŒŒ Night Owlโ€™s Companion: Gmail's low-light mode aids late-night emailing, easing under moonlight. The dark theme minimizes glare and fosters focus for night owls. Night mode theme mail adjusts to tasks, guarding eyes during midnight work. ๐Ÿ”„ Optimized for All Conditions: โ€” Dark theme webmail adjusts to lighting for optimal viewing. โ€” Gmail dark mode is a smart, responsive feature adapting to your environment. โ€” Messaging platform black mode ensures optimal email viewing in various settings. ๐ŸŒŸWhat are the advantages of opting for Gmail's low-light mode? ๐ŸŒฟ Efficient screen time management: mail's low-light mode helps users manage screen time effectively. ๐ŸŒฟ Reduced eye strain: Dark mode included in low-light mode lessens eye strain. ๐ŸŒฟ Prolonged comfort: Low-light mode promotes comfort during extended screen use. ๐ŸŒŸWhat happens to the Gmail theme in low-light mode, and how does it affect the user experience? 1. Transformation of Gmail theme: The mail theme undergoes a transformation. 2. Seamlessly navigable panel: Your inbox becomes a seamlessly navigable panel. 3. Enhanced by dark shades: The transformation is further enhanced by serene and soothing dark shades. ๐ŸŒŸHow does the integration of smart computing in dark mode for webmail go beyond aesthetics, and what benefits does it offer in terms of productivity and user experience? ๐Ÿš€Integration of smart computing: Dark mode for webmail goes beyond aesthetics. ๐Ÿš€Reflecting user-centric design: It integrates user-centric design for enhanced productivity. ๐Ÿš€Technological innovation: Dark mode embodies technological innovation for improved user experience. Remember, with mail dark mode, reading emails no longer has to be a strain on your eyes, nor a disruption to your sleep patterns. Enjoy a more comfortable, stylish, and practical email experience with our simple yet impactful extension.

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
*://*/*
Host
Critical
Broad host access โ€” the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:โ€ข 10% increase: Early script execution enables pre-emptive content manipulationโ€ข 10% increase: About:blank access enables potential sandbox escape vectors
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
About:blank Access
Risk Factor
Medium
This extension can run content scripts in about:blank pages.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
fontSettings
Permission
Low
This permission controls browser font rendering settings. Rated Low because it only affects visual display preferences without access to content.

On install and uninstall, the extension calls out to a third-party domain `ext.aitools.band` (a cheap, non-reputable TLD unrelated to the original Dark Reader project this code is forked from). These callouts leak install/uninstall events along with the user's IP and User-Agent to an external operator, providing an install-tracking and lifecycle-analytics signal that the user did not consent to. The original upstream Dark Reader extension does not include such third-party tracking endpoints.

background.js (Line 3571)
tO.ALARM_NAME = "auto-time-alarm", tO.LOCAL_STORAGE_KEY = "Extension-state", chrome.runtime.setUninstallURL(  "https://ext.aitools.band/gmail-dark-mode/uninstall");let t6 = new tO;t6.start(), chrome.commands && chrome.commands.onCommand.addListener(async e => t6.onCommand(e)), console.log("Hi!"),  chrome.runtime.onInstalled.addListener(e => {    e.reason === chrome.runtime.OnInstalledReason.INSTALL ? chrome.tabs.create({        url: "https://ext.aitools.band/gmail-dark-mode/congrats"      }) : e.reason === chrome.runtime.OnInstalledReason.UPDATE || e.reason === chrome.runtime.OnInstalledReason      .CHROME_UPDATE || (e.reason, chrome.runtime.OnInstalledReason.SHARED_MODULE_UPDATE)  }), chrome.runtime.onMessage.addListener((e, t, s) => {

The extension is branded and advertised as 'Gmail Dark Mode' yet declares `<all_urls>` content-script matches plus `*://*/*` host_permissions and the `scripting`/`tabs` permissions, with `run_at: document_start`, `all_frames: true`, and `match_about_blank: true`. This grants total read/inject access to every page the user visits, far beyond what a Gmail-only theming utility requires. Combined with the third-party install/uninstall callbacks, this overbroad scope is a deceptive-scope red flag indicative of a rebrand-and-monetize fork.

manifest.json (Line 18)
  "content_scripts": [    {      "matches": [                "<all_urls>"            ],      "js": [                "inject/fallback.js",                "inject/index.js"            ],      "run_at": "document_start",      "all_frames": true,      "match_about_blank": true        }    ],  "permissions": [        "alarms",        "fontSettings",        "scripting",        "tabs",        "storage",        "unlimitedStorage"    ],...  "host_permissions": [        "*://*/*"    ]

The popup references an unbound global identifier `DONATE_URL` (an unsubstituted build-time placeholder), so the rendered donate link will throw a ReferenceError at runtime. Combined with `index.html` still titled 'Dark Reader settings' and referencing `darkreader-icon-256x256.png`, this confirms the package is a hasty rebrand of the open-source Dark Reader project shipped with broken/unreviewed UI โ€” typical of low-effort republish jobs that swap in tracking endpoints (see `aitools.band` finding) while leaving the rest of the codebase untested.

ui/popup/index.js (Line 5023)
function nT() {  return e("div", {    class: "m-donate-group"  }, e("a", {    class: "m-donate-button",    href: DONATE_URL,    target: "_blank",    rel: "noopener noreferrer"  }, e("span", {    class: "m-donate-button__icon"  }), e("span", {    class: "m-donate-button__text"  }, eX("donate"))), e("label", {    class: "m-donate-description"  }, "This project is sponsored by you"))}

The service worker exposes a generic `fetch`/`XMLHttpRequest` proxy (function `$` and `v`) that is dispatched via the `CS_FETCH` message channel from content scripts, allowing any injected page context to request arbitrary cross-origin URLs through the extension's privileges with `host_permissions: *://*/*`. While in upstream Dark Reader this is used to fetch CSS for theming, in a rebranded fork running on every URL it is an unrestricted SOP-bypass primitive โ€” content scripts on any site can ask the background to fetch any URL the extension has access to. Worth noting given this fork's added third-party telemetry endpoints and over-broad scope.

background.js (Line 26)
let h = "function" == typeof XMLHttpRequest,  u = "function" == typeof fetch,  d = globalThis.chrome && globalThis.chrome.runtime && globalThis.chrome.runtime.getManifest && 3 === globalThis  .chrome.runtime.getManifest()  .manifest_version,  ...  async function $(e, t, s) {      let r = await fetch(e, {        cache: "force-cache",        credentials: "omit",        referrer: s      });

By severity

Critical0
High0
Medium2
Low2

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
4.9.534

Files with findings

3 distinct paths โ€” top paths by unique finding count:

  • background.js2
  • manifest.json1
  • ui/popup/index.js1
S.No.
Category
Severity
File
Summary
Found in Version
1Privilege Escalation
medium
manifest.json (line 18)The extension is branded and advertised as 'Gmail Dark Mode' yet declares `<all_urls>` content-script matches plus `*://*/*` host_permissions and the `scripting`/`tabs` permissions, with `run_at: document_start`, `allโ€ฆ
2Tracking
medium
background.js (line 3571)On install and uninstall, the extension calls out to a third-party domain `ext.aitools.band` (a cheap, non-reputable TLD unrelated to the original Dark Reader project this code is forked from). These callouts leak insโ€ฆ
3Network Interception
low
background.js (line 26)The service worker exposes a generic `fetch`/`XMLHttpRequest` proxy (function `$` and `v`) that is dispatched via the `CS_FETCH` message channel from content scripts, allowing any injected page context to request arbiโ€ฆ
4Obfuscation
low
ui/popup/index.js (line 5023)The popup references an unbound global identifier `DONATE_URL` (an unsubstituted build-time placeholder), so the rendered donate link will throw a ReferenceError at runtime. Combined with `index.html` still titled 'Daโ€ฆ
URLs
106
IPv4
1
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

addons.mozilla.org-https://addons.mozilla.org/
chrome.google.com/webstorehttps://chrome.google.com/webstore
microsoftedge.microsoft.com/addonshttps://microsoftedge.microsoft.com/addons
www.w3.org/2000/svghttp://www.w3.org/2000/svg
google.com-https://google.com/
ext.aitools.band/gmail-dark-mode/uninstallhttps://ext.aitools.band/gmail-dark-mode/uninstall
ext.aitools.band/gmail-dark-mode/congratshttps://ext.aitools.band/gmail-dark-mode/congrats
www.gstatic.com/images/branding/googlelogohttps://www.gstatic.com/images/branding/googlelogo
www.hcaptcha.com-https://www.hcaptcha.com/
images.squarespace-cdn.com-https://images.squarespace-cdn.com
Showing 1 to 10 of 110 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

74.0.0.0
IPv4
-
Version
Size
Is Malicious
Findings
Permhash
4.9.53
Latest
0.53 MB
Benign
4
Showing 1 to 1 of 10 rows
Rows per page:

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.