Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: InteractiveFics

CRITICAL RISKRemoved from Chrome Web Store

InteractiveFics

ID: pcpjpdomcbnlkbghmchnjgeejpdlonli

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

5.2.5

Size

0.33 MB

Rating

4.6/5

Reviews

219

Users

148,946

Type

Extension

Updated

Jul 31, 2023

Publisher Contextual Analysis

Author: marek-szczepankiewiczView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

148,946

Replaces Y/N & other variables in Reader Insert/second person fics with words of your choice.

InteractiveFics is designed to improve your online story reading experience of second-person "interactive fiction", popular on tumblr, that most commonly uses some variation of "Y/N" to indicate where your character's name should go. If you use this extension, you can enter whatever value you want into it and it will change "Y/N" (and its derivatives, or a special expression if the writer uses another thing to abbreviate the part where the name goes) into that value on all webpages. You can also replace other, unrelated words and expressions to whatever you like. Update version 5.2.4 adds new features: - Get the entire content of the website - Edit content - Share content on social networks: Twitter, LinkedIn and post to Facebook using facebook's api just one click.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+11.12%(+14,906 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 204 ratings+1 (0%)

Average Rating

Current: 4.63 / 5.0+0.00

Item	Type	Severity	Description
declarativeNetRequest	Permission	Critical	This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
://.facebook.com/*	Host	Medium	Host permission — access limited to this URL pattern.
://twitter.com/	Host	Medium	Host permission — access limited to this URL pattern.
://.linkedin.com/*	Host	Medium	Host permission — access limited to this URL pattern.
Access to Sensitive Domains	Risk Factor	Medium	This extension requests access to sensitive domains: ://.facebook.com/, ://twitter.com/, ://.linkedin.com/

Sensitive Domain Access

This extension has access to the following sensitive domains:

*://*.facebook.com/*
*://twitter.com/*
*://*.linkedin.com/*

By severity

Critical0

High1

Medium2

Low1

Versions scanned

Showing 1 of 9 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
5.2.2 Code review	4

Extension Version	Code Review Findings
5.2.2	4

Files with findings

3 distinct paths — top paths by unique finding count:

content_script.js2
manifest.json1
popup.html1

S.No.	Category	Severity	File	Summary	Found in Version
1	Unauthorized Data Collection	high	content_script.js (line 14)	The content script runs on every URL (`:///*`) including sensitive sites (banking, email, healthcare). It fetches ALL sync and local storage items on every page load and can install a MutationObserver that fires `re…	5.2.2
2	Tracking	medium	manifest.json (line 22)	The content script is injected into every HTTP and HTTPS page (`:///*`) with no domain restriction. Additionally, `popup.html` is declared as the background page — an unusual pattern that causes the popup UI code (i…	5.2.2
3	Tracking	medium	popup.html (line 9)	Because `popup.html` is also used as the persistent background page, it loads an external Google Fonts stylesheet on every browser start, sending the user's IP and timing data to Google's servers. The Toucan affiliate…	5.2.2
4	Other	low	content_script.js (line 1)	Three variables are assigned without `var`, `let`, or `const`, making them implicit globals that are attached to the `window` object of every page the content script runs on. Any other script on the page can read or o…	5.2.2

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.


www.w3.org	/2000/svg	http://www.w3.org/2000/svg
twitter.com	/intent/tweet	https://twitter.com/intent/tweet?text=${encodeURI(s.value.slice(0,279
www.linkedin.com	/feed/	https://www.linkedin.com/feed/?content-share=${encodeURI(s.value.slice(0,2999
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
element-plus.org	/en-US/component/button.html	https://element-plus.org/en-US/component/button.html#button-attributes
github.com	/vuejs/vue-next/pull/2485/n	https://github.com/vuejs/vue-next/pull/2485\n
element-plus.org	/en-US/component/dialog.html	https://element-plus.org/en-US/component/dialog.html#slots
element-plus.org	/en-US/component/drawer.html	https://element-plus.org/en-US/component/drawer.html#slots
element-plus.org	/en-US/component/switch.html	https://element-plus.org/en-US/component/switch.html#attributes
element-plus.org	/en-US/component/tabs.html	https://element-plus.org/en-US/component/tabs.html#attributes

Showing 1 to 10 of 30 rows

Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.


1.2.3.4	IPv4	-
2.1.0.0	IPv4	-
2.0.0.0	IPv4	-
1:2:3:4:5:6:7:8	IPv6	-

4.9 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

I absolutely love it. sometimes i have to fidget a bit with it to get it to work but it usually does

Nadia Molina·15 Oct 2023

i don't read fics but was very efficient at replacing abbreviations in scholarly papers - 10/10 fr

bunger·4 Oct 2023

i LOOVVEEE this extension. i recently switched accounts on my computer and was going to read a fanfic and of course, i get hit with the random name for y/n. i thankfully remembered this extension and now have it downloaded on my new account. this is my favorite chrome extension, and not only can you fill in the y/n name, you can also replace an already exsisting name, which is very helpful. ive had this extension for about 2/3 years on my other account after someone had mentioned it on tiktok and it was literally a life saver. i recommend this to anyone who doesnt like seeing y/n or if you want to change the name the author has already provided for you!

Version	Size	Is Malicious	Findings	Permhash
5.2.4 Latest	0.34 MB	Malicious	—	34de3f77521d53176b863ce3773cbaf591f8e74621e58bf3f08d80819c85c02f
5.2.3	0.04 MB	Malicious	—	58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
5.2.2	0.05 MB	Malicious	4	58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
5.2.1	0.05 MB	Malicious	—	58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
5.2.0	0.04 MB	Malicious	—	58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
5.1.1	0.04 MB	Malicious	—	58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
5.1.0	0.04 MB	Malicious	—	58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
5.0.5	0.04 MB	Malicious	—	58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
5.2.5	0.33 MB	Malicious	—	34de3f77521d53176b863ce3773cbaf591f8e74621e58bf3f08d80819c85c02f

Showing 1 to 9 of 10 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Security Alert: Confirmed Malware

InteractiveFics

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Manifest File Security Analysis

Sensitive Domain Access

Code Review Findings Summary Across 9 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating