Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: HLS Downloader

CRITICAL RISKRemoved from Chrome Web Store

HLS Downloader

ID: apomkbibleomoihlhhdbeghnfioffbej

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

3.0.0

Size

0.52 MB

Rating

4.0/5

Reviews

291

Users

177,239

Type

Extension

Updated

Feb 28, 2021

Publisher Contextual Analysis

Author: PuemosView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

177,239

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

HTTP Live Stream downloader

Quick guide: 1. Open a tab with an HTTP Live Stream 2. Click the extension icon 3. Select a playlist 4. Select a resolution (quality of the video) 5. Wait for the download to complete Source code: https://github.com/puemos/hls-downloader-web-extension Enjoy! Changelog: v3.0.0 - Unlimited Storage permission - Use IndexedDB for storing chunks - Downloads are separated as Jobs - New empty status design - Download progress UI v2.2.0 - Cancel a download v2.1.1 - AES-128 support - Downloads view

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium3

Low1

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.0.0 Code review	5

Extension Version	Code Review Findings
3.0.0	5

Files with findings

3 distinct paths — top paths by unique finding count:

static/js/2.cb0f8d55.chunk.js3
index.html1
service-worker.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	high	service-worker.js (line 14)	The service worker loads the Workbox library directly from an external Google CDN URL at runtime using importScripts, with no Subresource Integrity (SRI) hash verification. If this CDN endpoint were compromised, redir…	3.0.0
2	Code Injection	medium	static/js/2.cb0f8d55.chunk.js (line 7551)	The bundle uses the Function constructor as a fallback to inject a global variable (`regeneratorRuntime`) by dynamically constructing and immediately invoking a function string. While this is a known pattern emitted b…	3.0.0
3	Tracking	medium	index.html (line 1)	The popup loads a remote Google Fonts stylesheet when opened. That causes outbound requests from the extension UI, which can leak user IP, user agent, and extension usage timing to a third party, and also imports remo…	3.0.0
4	Unauthorized Data Collection	medium	static/js/2.cb0f8d55.chunk.js (line 14404)	On startup, the extension queries every open browser tab (no filter applied to `tabs.query({})`) and sends each a message. Combined with `runtime.onConnectExternal` registration (which accepts connections from externa…	3.0.0
5	Code Injection	low	static/js/2.cb0f8d55.chunk.js (line 3330)	A second use of the Function constructor here attempts to obtain a reference to the global object by constructing and executing `new Function("return this")()`. This bypasses strict-mode semantics for global `this` an…	3.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.apache.org	/licenses/LICENSE-2.0	http://www.apache.org/licenses/LICENSE-2.0
bit.ly	/3cXEKWf	https://bit.ly/3cXEKWf
redux.js.org	/api-reference/store	https://redux.js.org/api-reference/store#subscribelistener
bit.ly	/redux-logger-options/nimport	http://bit.ly/redux-logger-options\nimport
developer.mozilla.org	/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage	https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
*	/*.m3u8	http:///.m3u8
*	/*.m3u8	https:///.m3u8
*	/*.m3u8	http:///.m3u8?*
*	/*.m3u8	https:///.m3u8?*
github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.16.173.244	IPv4	-
183.117.253.253	IPv4	-
7.12.251.251	IPv4	-
18.19.43.3	IPv4	-

4.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

перебрал пару десятков приложений. только это помогло скачать blob видео с лекцией

Romes Qwerty·26 May 2021

перебрал пару д��с��тков приложе��ий. тол��ко это пом��гло ск��ча��ь blob видео с лекцией

Romes Qwerty·26 May 2021

перебрал пару д��с��тков приложе��ий. тол��ко это пом��гло скача��ь blob видео с лекцией

Romes Qwerty·26 May 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

HLS Downloader

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews