Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: JavaScript and CSS Code Beautifier

CRITICAL RISKRemoved from Chrome Web Store

JavaScript and CSS Code Beautifier

ID: iiglodndmmefofehaibmaignglbpdald

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

4.0.3

Size

0.35 MB

Rating

4.3/5

Reviews

107

Users

51,082

Type

Extension

Updated

Feb 27, 2023

Publisher Contextual Analysis

Trusted

Author: http://c7x.meView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

51,082

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Beautify CSS, JavaScript and JSON code when you open a .css/.js/.json file.

When looking at a CSS, JavaScript or JSON file, automatically(optional) make source code beautiful! Features --------- · CSS(Less/Scss/Sass) / JavaScript(JSON/JSX/TypeScript) formatting · Unpack or deobfuscate JavaScript · 60+ themes for syntax highlighting · and more... Uses JSBeautifier(https://jsbeautifier.org/) and CodeMirror(https://codemirror.net/). _______ JavaScript 代码格式化、解密、反混淆和 CSS 代码高亮。当你访问 CSS、JavaScript 或 JSON 文件时，自动格式化并高亮代码。功能 ------ · 格式化 CSS(Less/Scss/Sass)、JavaScript(JSON/JSX/TypeScript) 代码 · JavaScript 代码解密、反混淆 · 60 多种代码高亮主题 · 丰富的自定义选项

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+1.46%(+735 users)

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 105 ratings

Average Rating

Current: 4.30 / 5.0-0.04

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium2

Low0

Versions scanned

Showing 1 of 9 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.4.3 Code review	4

Extension Version	Code Review Findings
3.4.3	4

Files with findings

3 distinct paths — top paths by unique finding count:

background.js2
content-script.js1
options.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	high	options.js (line 112)	The options page dynamically injects a <script> tag that loads `ga.js` from ssl.google-analytics.com at runtime. This is remote code execution from a third-party origin inside the extension's options page context — ar…	3.4.3
2	Tracking	high	background.js (line 49)	The service worker posts telemetry events to api.mixpanel.com every time the extension detects or beautifies a file, including a persistent per-install `distinct_id` (see uid handling below), file language/type, and a…	3.4.3
3	Tracking	medium	content-script.js (line 67)	On every page load matching the broad content-script globs (:///.js, :///.json, :///*.css, etc. across <all_urls>), the content script reports a `found` message back to the background worker, which then fires …	3.4.3
4	Unauthorized Data Collection	medium	background.js (line 39)	The extension generates a persistent 32-byte random identifier on first run and stores it in chrome.storage.sync, which syncs across the user's Chrome profiles via their Google account. This UID is then transmitted as…	3.4.3

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

112

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


api.mixpanel.com	/track	https://api.mixpanel.com/track
icecoder.net	-	https://icecoder.net
github.com	/equinusocio	http://github.com/equinusocio
material-theme.site	-	https://material-theme.site/
lesscss.org	-	http://lesscss.org/
github.com	/idleberg	http://github.com/idleberg
github.com	/idleberg/base16-codemirror	https://github.com/idleberg/base16-codemirror
github.com	/chriskempson/base16	https://github.com/chriskempson/base16
bonsaiden.github.com	/JavaScript-Garden	http://bonsaiden.github.com/JavaScript-Garden
simurai.com	/projects/2016/01/01/duotone-themes	http://simurai.com/projects/2016/01/01/duotone-themes

Showing 1 to 10 of 120 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.8 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

My go to extension, thank you so much! If it is open source, someone could help publish firefox add-on. If it is not, is it possible for you guys to publish it(PLEASE, this could help thousands of users/developers).

Nitin Choudhary·10 May 2023

Please add dark mode support.

brunost77Spiller·14 Jan 2023

Best tool. Couldn't find on the opposing Browser. 10 out of 10

Juan Bomfim·20 Dec 2022

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

JavaScript and CSS Code Beautifier

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 9 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating