Extension Auditor
Extension Auditor
Sign Up

Image Dimmer

ID: odkapofdbiffeboekegbhhbbpioljied

Could be malicious

Supported Languages

🇧🇩Bengali
🇧🇷Brazilian Portuguese
🇬🇧British English
🇧🇬Bulgarian
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇭🇷Croatian
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇪🇪Estonian
🇵🇭Filipino
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇬🇷Greek
🇮🇳Gujarati
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇱🇻Latvian
🇱🇹Lithuanian
🇲🇾Malay
🇮🇳Malayalam
🇮🇳Marathi
🇳🇴Norwegian
🇵🇱Polish
🇵🇹Portuguese
🇷🇴Romanian
🇷🇺Russian
🇷🇸Serbian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇸🇪Swedish
🇮🇳Tamil
🇮🇳Telugu
🇹🇭Thai
🇹🇷Turkish
🇺🇸US English
🇻🇳Vietnamese

Extension Info & Metadata

Status
Removed
Version
0.3.5
Size
0.28 MB
Rating
0.0/5
Reviews
0
Users
180,342
Type
Extension
Updated
Mar 8, 2021
Category
7_productivity
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Author
Leonie WaelchiView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
180,342

Reduce image brightness on web pages. Become less distracted by too bright images.

Image Dimmer reduces the brightness of images on web pages. There are plenty of artificially bright images all over the web. It leads to eye strain and distraction. Features: ⭐ Adjust image brightness from 0% to 100% ⭐ Enable globally or for specific web sites

Item
Type
Severity
Description
<all_urls>
Permission
Critical
This permission grants access to all websites without restriction. Rated High because it can access any web content, monitor all web activity, and potentially steal sensitive data across all sites.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2

By severity

Critical0
High1
Medium2
Low2

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
0.3.25

Files with findings

3 distinct paths — top paths by unique finding count:

  • js/content.js2
  • manifest.json2
  • background.js1
S.No.
Category
Severity
File
Summary
Found in Version
1Code Injection
high
background.js (line 1)The background script uses `chrome.tabs.query({})` with an empty filter, which returns ALL open tabs across every window, then programmatically executes `content.js` in every one of them on install or update. This is …
0.3.2
2Obfuscation
medium
js/content.js (line 1)The trailing `()` on line 15 attempts to invoke the return value of the IIFE `(function(d){...})(document)`, which is `undefined`. This unconditionally throws `TypeError: undefined is not a function` every time `apply…
0.3.2
3Tracking
medium
manifest.json (line 14)The manifest's Content Security Policy explicitly whitelists `google-analytics.com` and `googletagmanager.com` as valid script sources in the extension's own context. No code in the reviewed files actually loads these…
0.3.2
4Remote Code Loading
low
manifest.json (line 1)The extension's CSP explicitly permits remote script sources from Google Analytics, Google APIs, and Google Tag Manager inside extension pages. The reviewed code does not actually load those endpoints, so this is not …
0.3.2
5Unauthorized Data Collection
low
js/content.js (line 17)The content script reads `window.location.hostname` on every page load and stores it inside the `domain` map in `chrome.storage.local`. While this is used for per-domain enable/disable logic, it means the extension pa…
0.3.2
URLs
68
IPv4
2
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessagehttps://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
npms.io/searchhttps://npms.io/search?q=ponyfill.
getbootstrap.com-https://getbootstrap.com/
github.com/twbs/bootstrap/blob/main/LICENSEhttps://github.com/twbs/bootstrap/blob/main/LICENSE
www.w3.org/2000/svghttp://www.w3.org/2000/svg
jquery.com-https://jquery.com/
sizzlejs.com-https://sizzlejs.com/
jquery.org/licensehttps://jquery.org/license
github.com/whatwg/html/issues/2369https://github.com/whatwg/html/issues/2369
html.spec.whatwg.org-https://html.spec.whatwg.org/#nonce-attributes
Showing 1 to 10 of 70 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
2.3.3.3
IPv4
-
2.3.3.1
IPv4
-
Version
Size
Is Malicious
Findings
Permhash
0.3.2
Latest
0.23 MB
Malicious
5
7570aab3c28d308e4f9783c069a7dbc094d479759563b364bf78f5eb860a908b
0.3.5
0.28 MB
Malicious
—
7570aab3c28d308e4f9783c069a7dbc094d479759563b364bf78f5eb860a908b
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In