Security Warning: High Security Risk
JS playground
ID: dndbfngnogbaloehcdbedmagjelddakk
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- skus1992View Profile
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
JS playground.
Simple Javascript playground for developers. Dark and Light themes. Libraries included: rxjs, lodash, moment. Autocomplete. - Added tabs.
This extension requests no permissions and has no recorded risk factors.
Every time the user types or the component mounts, the full contents of the code editor (`this.state.value`) are POSTed to a bare IP address over plain HTTP with no TLS. The destination `157.230.101.132` is unrelated to any publisher-disclosed domain or well-known SaaS, is not listed under CWS data-collection disclosures, and — given the extension hasn't been updated in ~865 days — the IP may now be owned by a completely different party. Users have no indication their code is leaving the browser.
fetch("http://157.230.101.132/api/execute", { method: "POST", body: JSON.stringify({ str: this.state.value, lodash: e, rxjs: t, moment: n }), headers: { "Content-Type": "application/json" } }) .then((e => 404 === e.status ? e.text() : e.json())) .then((e => { "string" == typeof e ? this.setState({ error: e, output: [] }) : this.setState({ output: e, error: null }), clearInterval(this.state.intervalRef) })) .catch((e => { clearInterval(this.state.intervalRef) }))By severity
Versions scanned
None of the 8 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| No versions with multiple unique findings. | |
Files with findings
1 distinct path — top paths by unique finding count:
- popup.bundle.js1
Code Diff
Compare extension code between any two versions.
No comparable text files found between these versions.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.