Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: IDM Desktop client for IG

CRITICAL RISKRemoved from Chrome Web Store

IDM Desktop client for IG

ID: gmcgogghoeflalkaljgfbnkbomcmaaln

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.4.80

Size

0.27 MB

Rating

4.0/5

Reviews

Users

426,484

Type

Extension

Updated

Feb 27, 2021

Publisher Contextual Analysis

Author: Wayne MorganView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

426,484

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Unofficial desktop client for Instagram™ - Upload stories, Direct Message, Download, and more

InstaDM provides a mobile Instagram experience on Desktop in your browser. The web version of Instagram is limited because IG wants you to use the mobile app. InstaDM is an unofficial app that allows you to use IG features such as direct messages, downloads, and uploading stories. Features: ⭐ direct messages (DM) ⭐ upload IGTV videos from the PC ⭐ make screenshots from the Instagram window to share them with friends ⭐ download images Please note, this app is an unofficial client for Instagram. It’s not affiliated with IG brand owners. 📜 Important Note: The app does NOT belong or related to the official Instagram application/website in any ways. It is an unofficial app that is developed and maintained independently. The official software is only released for smartphones and the web. This unofficial app (browser add-on) is a wrapper to the original Instagram web application and tries to make it usable as a browser plug-in. All the guidelines for Instagram's assets and branding use can be found here https://en.instagram-brand.com/

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High4

Medium1

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.4.80 Code review	5

Extension Version	Code Review Findings
1.4.80	5

Files with findings

4 distinct paths — top paths by unique finding count:

bg.js2
js/insert.js1
js/linkHandler.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	js/insert.js (line 1)	The script dynamically creates and injects a `<script>` element into the page DOM to override `navigator.userAgent` via the deprecated `__defineGetter__` API. This runs at `document_start` on every Instagram page and …	1.4.80
2	Network Interception	high	js/linkHandler.js (line 1)	This content script is injected on every page on the entire internet (`<all_urls>`, `all_frames: true`) and uses a persistent `MutationObserver` to intercept every click on any link containing `instagram.com` anywhere…	1.4.80
3	Network Interception	high	bg.js (line 1)	The background script registers a blocking `webRequest.onBeforeSendHeaders` listener that intercepts all HTTP requests to `*.instagram.com` originating from the extension-controlled popup tab and rewrites the `User-Ag…	1.4.80
4	Remote Code Loading	high	manifest.json (line 1)	The manifest explicitly allows `'unsafe-eval'` in the extension's Content Security Policy, permitting `eval()`, `new Function()`, and similar dynamic code execution within the extension's own pages. Additionally, scri…	1.4.80
5	Code Injection	medium	bg.js (line 1)	The background script programmatically re-injects `insert.js` via `chrome.tabs.executeScript` at `document_start` on every page load in the extension's popup tab, in addition to the manifest-declared content script in…	1.4.80

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


developer.mozilla.org	/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage	https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
npms.io	/search	https://npms.io/search?q=ponyfill.
www.instagram.com	-	https://www.instagram.com/
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/Graphics/SVG/1.1/DTD/svg11.dtd	http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd
www.instagram.com	/tv/upload/	https://www.instagram.com/tv/upload/
jquery.com	-	http://jquery.com/
sizzlejs.com	-	http://sizzlejs.com/
jquery.org	/license	http://jquery.org/license

Showing 1 to 10 of 50 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.0 out of 5 · 1 most recent review

Text reviews

Positive

Negative

cool!

ERROR_CANT .LOAD_NAME·30 May 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

IDM Desktop client for IG

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating