Chrome Web StoreNo malware found
In code review (v3.0.0)
Our reviewer read version 3.0.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
8 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Highlighter, used by 100,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 2 findings (1 high, 1 medium), led by other. Its permissions mean it can read and change data on all websites and can inject scripts into pages.
Key findings
- High
Other
The bundled manifest declares version 2, while the published Chrome Web Store listing shows manifest version 3 with updated permissions (host_permissions, scripting instead of tabs.executeScript). This mismatch suggests the provided source code does not match the live extension, which could indicate a delayed malicious update or an error in the review bundle.
- Medium
Unauthorized Data Collection
The extension loads Google Analytics and sends tracking events (highlight actions, color changes, popup opens) without disclosing this data collection in the Chrome Web Store listing, which states 'none declared'. This constitutes unauthorized tracking of user interaction with the extension.
Analyst notes
The extension is a text highlighter that works as described, saving highlights locally. The only external communication is Google Analytics for usage tracking, which is not disclosed in the CWS listing, and the bundled manifest version (v2) does not match the published manifest (v3). These issues are concerns rather than malicious behavior. No data exfiltration, injection, or obfuscation found. ML score 0.00, trusted publisher, and good user ratings support a benign assessment.
Highlighter Chrome extension security report
ID: fdfcjfoifbjplmificlkdfneafllkgmn
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Jérôme Parent-Lévesque
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
8 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Highlight text on websites with a simple right-click or keyboard shortcut. Saves highlights on your device.
Read the publisher’s full description
Easiest way to highlight text on any webpage! Simply select text, then right click it to select the "Highlight" option. Alternatively, use the default keyboard shortcut 'Alt+H' (^H on Mac). All highlighted texts are saved so that your highlights are not lost when exiting a page! Simply re-opening that page will bring back all the highlights. NOTE: This does not work on very dynamic webpages like Facebook and most email clients. Support for these might be added in the future. ➪ View and copy all highlights on a page ➪ Copy all your highlights to your clipboard easily. ➪ Select existing highlights with a simple click to either delete them or to copy their content. ➪ Customize your highlight colors (and text color). ➪ Change the keyboard shortcut through Chrome settings at 'chrome://extensions/shortcuts'. The code for this project is fully open-source and is available on GitHub: https://github.com/jeromepl/highlighter Help this project by reporting issues and contributing there! --------- Disclaimer: This extension uses Google Analytics to gather non-personal user information and usage information. We DO NOT collect browsing information such as the contents of highlights or accessed URLs. For more information, consult our privacy policy at the link below. The privacy policy for this extension can be found here: https://github.com/jeromepl/highlighter/blob/master/privacy_policy.md
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
8 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
Popular in Workflow & Planning
- Application Launcher For Drive (by Google)99,000,000 users
- Chrome Remote Desktop41,000,000 users
- Microsoft Single Sign On37,000,000 users
- Free VPN for Chrome - VPN Proxy VeePN15,000,000 users
- PrinterLogic Extension v1.0.6.113,000,000 users