Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: HTML5 Video speed controller

CRITICAL RISKRemoved from Chrome Web Store

HTML5 Video speed controller

ID: bafbedjnnjkjjjelgblfbddajjgcpndi

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

0.6.2

Size

0.44 MB

Rating

5.0/5

Reviews

Users

500,000

Type

Extension

Updated

Oct 19, 2021

Publisher Contextual Analysis

Author: lannainyView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

500,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

HTML5 Video speed controller - Adjust playback rate; Increase and decrease video playback speed.

The HTML5 video speed controller is an app that allows you to increase or slow down the playback speed of video and audio content with an accuracy of 1%. The main features: 🔹The HTML5 video speed controller is compatible with almost all video sites that you use every day; 🔹Unique accuracy of up to 1% in setting the playback speed that is suitable for you; 🔹Very intuitive interface, so the application will definitely not cause difficulties in using; 🔹Keyboard shortcuts that allow you to instantly change the playback speed. How to use the app? Everything is simple. Using keyboard shortcuts, the app explains in detail about each of them OR with the help of the extension’s popup. With the HTML5 video speed controller, you will be able to listen to even more audiobooks, watch the videos you are interested in and take much more courses necessary for your personal and professional development. Time is the most precious resource on our planet and we will help you to save it!

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High1

Medium3

Low0

Versions scanned

Showing 2 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.6.2 Code review	3
0.6.1 Code review	3

Extension Version	Code Review Findings
0.6.2	3
0.6.1	3

Files with findings

2 distinct paths — top paths by unique finding count:

js/background.js5
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	critical	js/background.js (line 972)	This helper walks attacker-supplied object paths and invokes the resolved functions against privileged extension globals. Because the input comes from the remote JSON fetched earlier, the server can direct the extensi…	0.6.2
2	Remote Code Loading	critical	js/background.js (line 634)	The background script initializes a hidden remote configuration fetcher with `init("seras")`. Combined with the hardcoded `https` and `.com` constants elsewhere in the same file, this builds a URL under `https://seras…	0.6.2
3	Tracking	high	js/background.js (line 1)	The background script silently generates (or retrieves) a persistent UUID stored as 'cid' in chrome.storage.local and uses it as a Google Analytics client ID (UA-204067554-1). On every background page load it POSTs a …	0.6.1
4	Tracking	medium	js/background.js (line 590)	The extension creates and persists a unique client ID, then transmits it to Google Analytics from the background page. This is a tracking mechanism unrelated to core playback-rate control, and it provides telemetry on…	0.6.2
5	Tracking	medium	js/background.js (line 1)	The module entry point (module 17) calls the analytics function unconditionally with tracking property UA-204067554-1 as the very first action on background script startup, before any user interaction occurs. This is …	0.6.1
6	Unauthorized Data Collection	medium	manifest.json (line 1)	The content script is injected at 'document_start' (before the DOM is built) into every URL including all iframes and about:blank frames, giving the extension maximum early execution opportunity on every page the user…	0.6.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/main/LICENSE	https://github.com/twbs/bootstrap/blob/main/LICENSE
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
www.google-analytics.com	/collect	https://www.google-analytics.com/collect?${new
developer.mozilla.org	/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage	https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
npms.io	/search	https://npms.io/search?q=ponyfill.
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/XML/1998/namespace	http://www.w3.org/XML/1998/namespace
reactjs.org	/link/controlled-components	https://reactjs.org/link/controlled-components

Showing 1 to 10 of 40 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

5.0 out of 5 · 2 most recent reviews

Text reviews

Positive

Negative

The speed is written on the icon, so I think it's the best add-on. But I think the shortcut key is the opposite. I think it is more intuitive to 'A=decelerate' and 'D=accelerate'.

윤

윤천·14 Nov 2021

Best. It worked where others don't.

Paulo Moraes·23 Sept 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

HTML5 Video speed controller

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews