Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Hypic - Photo Editor

CRITICAL RISKRemoved from Chrome Web Store

Hypic - Photo Editor

ID: edindlabbmapcfpihjcfnkkeanlcbdhk

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.3

Size

0.04 MB

Rating

3.7/5

Reviews

Users

923

Type

Extension

Updated

Jul 30, 2025

Publisher Contextual Analysis

Author: Hypic - Photo EditorView Profile
Privacy: Privacy Policy

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

923

Email Change History

1 change

Jul 22, 2025

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Hypic Photo Editor: Edit images from URLs, device, or web via context menu with blur, vintage, glow filters.

Hypic Photo Editor Browser Extension. Hypic Photo Editor: Transform your photos with ease! Edit images from URLs, your device, or directly from the web using a right-click menu. Enjoy blur, vintage, and glow filters, plus rotate, zoom, and text options. Perfect for quick, creative edits!What’s New:Right-click web images to edit them instantly with "Edit with Hypic Photo Editor." Enhanced filter controls with adjustable sliders for blur, vintage, and glow effects. Improved interface for a smoother editing experience.

User Growth

Showing data from Nov 11, 2024 to Nov 10, 2025

Versions

No change in user count

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 3 ratings

Average Rating

Current: 3.67 / 5.0+3.67

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium1

Low1

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.3 Code review	5

Extension Version	Code Review Findings
1.3	5

Files with findings

3 distinct paths — top paths by unique finding count:

script.js3
index.html1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Obfuscation	high	index.html (line 1)	The HTML file uses deliberately malformed markup with spaces injected inside angle brackets (e.g., `< !DOCTYPE html >`, `< html lang = "en" >`, `< head >`). This is not valid HTML, yet lenient browser parsers may stil…	1.3
2	Unauthorized Data Collection	high	manifest.json (line 25)	A client-side-only photo editor that applies canvas filters has no legitimate need for `<all_urls>` host permissions — it operates entirely within a local extension page and requires no cross-origin network access of …	1.3
3	Unauthorized Data Collection	high	script.js (line 7)	The extension uses `img.crossOrigin = "Anonymous"` to load images from arbitrary URLs passed via query parameter from any site. Combined with the `<all_urls>` host permission (which causes the browser to treat the ext…	1.3
4	Unauthorized Data Collection	medium	script.js (line 117)	`ctx.getImageData()` reads the full raw pixel buffer of any cross-origin image loaded via `loadImageToCanvas`, and `canvas.toDataURL()` serializes the entire canvas to a base64 data URI. While `saveImage` triggers a l…	1.3
5	Other	low	script.js (line 15)	All user-facing alert messages and inline comments are written in Polish, yet the extension is published in English on the Chrome Web Store with an English description targeting international users. This language mism…	1.3

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Hypic - Photo Editor

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Email Change History

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating