Chrome Web StoreCaution required
Suspicious in code review (v1.3.1)
Our reviewer found behaviour consistent with malware in version 1.3.1, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
2 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Indian Railways @etrain.info, used by 100,000 people, is rated caution by Extension Auditor. Our code review reported 3 findings (1 critical, 1 medium, 1 low), led by code injection. It was last updated in November 2025.
Key findings
- Critical
Code Injection
The 'script' message handler executes arbitrary JavaScript code (request.data) provided by the [domain withheld] website in any tab via chrome.tabs.executeScript, without validation or sandboxing. This allows the website to perform unrestricted code injection with the extension's elevated privileges, potentially enabling cookie theft, page manipulation, or data exfiltration on any site.
- Medium
Other
The bundled manifest declares permissions (cookies, tabs, host) that do not match the published manifest summary (Chrome Web Store listing), which shows a manifest v3 with declarativeNetRequestWithHostAccess, offscreen, and no cookies permission. This discrepancy indicates a permissions reduction in a later version, but the current version retains broader access.
- Low
Other
The 'cookies' permission is declared in the manifest but is never used by any code in the extension. This unnecessary permission increases the attack surface and elevates risk without providing any functionality.
Analyst notes
The extension allows the [domain withheld] website to execute arbitrary JavaScript in any tab via an unvalidated 'script' handler (:71-80), posing a critical code injection risk. The bundled manifest declares unnecessary 'cookies' permission and mismatches the published Chrome Web Store manifest (v2 vs v3, different permissions). While the code is not obfuscated and appears to be a companion extension, the unrestricted script execution is a serious vulnerability.
Indian Railways @etrain.info Chrome extension security report
ID: fjjlkgnbokonfaiffccmofmfopdlfmmf
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- etrain.info
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
Screenshots & videos
Install growth
2 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
An extension to support etrain.info to provide advanced features
Read the publisher’s full description
This extension provides secure access functionality exclusively for the website etrain.info. Note: This extension provides functionality only to etrain.info website and will remain inactive on other websites. Install it only if you are a user of etrain.info and have been prompted to install the extension to access secure features.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
2 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in Workflow & Planning
- Application Launcher For Drive (by Google)102,000,000 users
- AdBlock — block ads across the web65,000,000 users
- Chrome Remote Desktop41,000,000 users
- Adblock Plus - free ad blocker40,000,000 users
- Microsoft Single Sign On37,000,000 users