Chrome Web Store
2Versions
1Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. Review the permissions below before installing.

41 indicators in this extension

41 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

股票提醒助手, used by 6,000 people, showed no malicious code in Extension Auditor's review. It was last updated in June 2023.

Analyst notes

Every outbound request in the bundle goes to Chinese market-data endpoints that are exactly this extension's stated purpose: [domain withheld] (:176,228), [domain withheld] (:99,200), [domain withheld] (:99,192) and chart GIFs from [domain withheld] (:45-49); the only data sent is user-entered stock symbols, there are no content scripts, no chrome. use, no eval or dynamic Function in first-party code, and MV3 CSP is script-src 'self'. The ML evidence is fully accounted for by the data layer: 2 XMLHttpRequest + 4 GETs are the three quote providers, and 685 KB of JS is dominated by (319 KB, a static array of A-share triples) plus a beautified, unmodified jQuery 1.7 (152 KB). Contradicting signals I cannot refute from code: the internal IoC note and 'publisher flagged malicious', plus two files the analysis bundler strips by rule (SKIP_FILE_SUFFIXES =. in code_analyzer.py) — and, which the signed confirms ship in the CRX and which actually load; that is why this is likely_benign at medium confidence rather than false_positive.

股票提醒助手

股票提醒助手 Chrome extension security report

ID: goiffchdhlcehhgdpdbocefkohlhmlom

Supported Languages

🇨🇳Chinese (Simplified)

Extension Info & Metadata

Status
Active
Version
3.8.0
Size
0.26 MB
Rating
4.6/5
Reviews
234
Users
6,000
Type
Extension
Updated
Jun 21, 2023
Category
Just for fun
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Author
七一〇
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
6,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4

Install growth

Item
Type
Severity
Description
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
http://finance.sina.com.cn/
Host
Medium
Host permission — access limited to this URL pattern.
https://xueqiu.com/
Host
Medium
Host permission — access limited to this URL pattern.
http://image.sinajs.cn/
Host
Medium
Host permission — access limited to this URL pattern.
https://stock.xueqiu.com/
Host
Medium
Host permission — access limited to this URL pattern.
http://qt.gtimg.cn/
Host
Medium
Host permission — access limited to this URL pattern.
*://*/
Host
Medium
Host permission — access limited to this URL pattern.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
idle
Permission
Low
This permission detects system idle state. Rated Low because it only observes user activity state without access to activity details.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

41 indicators in this extension

41 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

显示股票信息。可以根据设置的股票价格,进行提醒。

Read the publisher’s full description

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v3.7.5: 1、增加股票标记功能。 2、增加新股票。 3、修正之前不能弹出信息的BUG。 4、单只股票的连接,请点击股票信息中的图片。 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v3.7.4: 1、添加对新的通知中心的支持。 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v3.7.3: 1、修正新版浏览器,弹出窗口股票价格显示过大的问题。 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v3.7: 1、可以添加数据库中没有的股票,输入:shxxxxxx, szxxxxxx 以后新股也不用怕了 2、修正股票列表中价格比较错误的BUG ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v3.6: 1、鼠标移入走势图时,显示日k线。 2、修正自选股页面BUG。 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v3.5.6: 1、鼠标挪到图标上,显示当前选中的股票及前5个股票的价格和涨跌幅。 2、增加成交量(手)、成交额显示(万元) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v3.5.3: 1、更改扩展名称为中文名。 2、修正自选股拖动的一些问题。 3、弹出窗口,当股票价格超出显示时,自动缩小(主要是深成指)。 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v3.4: 1、修改自选股界面,可以对已经输入的股票信息进行拖动位置。 2、增加自选股导入导出(暂时只能导出股票信息,不能导出备注)。 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v3.2: 1、修正刷新问题。 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v3.0: 1、弹出窗口显示股票价格及涨跌幅度。 2、图标提示更改“股票提示助手”为“股票名称+涨跌幅”。 3、可以配置是否下载股票图片。 4、增加备注功能。 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v2.7: 1、完善股票提醒设置界面,显示更全面的信息。 2、一些小修改。 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v2.6: 1、到达提醒状态时,图标闪烁,点击图标后停止。 2、弹出界面,增加图标价格的快捷隐藏链接。 3、到达提醒状态后,弹出窗体内的股票按钮左上角、右下角更圆滑,用于与其它股票区别。 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v2.5: 1、添加股票窗口显示当前价格,方便设置预警。 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v2.1: 1、弹出窗口中添加新浪财经的快捷链接(可以通过选项关闭)。 2、添加股票涨跌率的显示。 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 股票提醒助手 v2.0: 1、最多可以同时监控10只股票。 2、设定预警(上穿、下破)价格,到达预警条件后,根据声音、提示窗口提醒。

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
31

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

41 indicators in this extension

41 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
3.7.9
Latest
0.18 MBNot scanned—
20312198e8103ef90a8ce2a6fe3e6a9c500b06d366477213978486a056eff742
3.8.0
0.26 MBNo malware found0
fd0ab71e705851f75e5676e4f3fbe6e50ede58e77d16e703240cad04e323a992
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Just for Fun