Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Just Color Picker

CRITICAL RISKRemoved from Chrome Web Store

Just Color Picker

ID: eimbhjnmkapfcaibnmnefclolghnaalk

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

0.1.6

Size

0.98 MB

Rating

4.7/5

Reviews

106

Users

193,608

Type

Extension

Updated

Jan 26, 2021

Publisher Contextual Analysis

Author: Marvin PettersenView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

193,608

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Сolor picker for web designers and digital artists, created by a designer and digital artist

With Just Color Picker, identifying the colors, saving, and editing them into beautiful color combinations is a quick and simple job. Just Color Picker features include: * Different formats: HEX, RGB, HSV * Detect most used color on the page * Color list of recently picked colors * Red-Green-Blue (RGB) color wheel to adjust selected color How to use: 1. Click on extension’s button in the toolbar 2. Click the “Pick Color” button 3. Select an area on the page with a color you need 4. Double click to HEX representation to copy it to the clipboard 5. Use arrows to switch color representation

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High1

Medium3

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.1.6 Code review	7

Extension Version	Code Review Findings
0.1.6	7

Files with findings

3 distinct paths — top paths by unique finding count:

background.js3
averageColor.js2
manifest.json2

S.No.	Category	Severity	File	Summary	Found in Version
1	Unauthorized Data Collection	critical	background.js (line 7000)	The extension silently captures a full screenshot of every tab that becomes active via `chrome.tabs.captureVisibleTab`, with no user interaction or activation of the color-picker tool required. This means a complete s…	0.1.6
2	Unauthorized Data Collection	critical	averageColor.js (line 136)	This content script is injected into ALL pages (`<all_urls>`) at `document_end` and immediately sends a `get_screenshot` request on every page load without any user action. It receives the full page screenshot as a ba…	0.1.6
3	Unauthorized Data Collection	critical	background.js (line 6894)	The `get_screenshot` function captures the full visible tab as a PNG using `chrome.tabs.captureVisibleTab` and immediately transmits the base64-encoded image data to the page's content script. This is invoked both aut…	0.1.6
4	Unauthorized Data Collection	high	averageColor.js (line 130)	This content script requests a tab screenshot as soon as it loads, without waiting for an explicit user action on the current page. Although the code appears to use the screenshot to compute a dominant color locally, …	0.1.6
5	Tracking	medium	manifest.json (line 36)	The manifest's Content Security Policy explicitly whitelists `google-analytics.com` and `googletagmanager.com` as permitted script sources, indicating the extension was designed to load tracking scripts from these dom…	0.1.6
6	Unauthorized Data Collection	medium	manifest.json (line 8)	The extension injects a content script into every visited page at `document_end`, which gives it continuous access to page context across the user's browsing. In this package, that auto-injected script immediately req…	0.1.6
7	Unauthorized Data Collection	medium	background.js (line 6991)	The background page triggers a screenshot every time the user activates a different tab, which creates passive monitoring behavior across normal browsing. That means screenshot collection is not limited to the explici…	0.1.6

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


fontawesome.io	-	http://fontawesome.io
fontawesome.io	/license	http://fontawesome.io/license
fontawesome.iohttp	//fontawesome.io/license/http://fontawesome.io/license/%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD	http://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/license/��
www.w3.org	/Graphics/SVG/1.1/DTD/svg11.dtd	http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd
getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/master/LICENSE	https://github.com/twbs/bootstrap/blob/master/LICENSE
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
github.com	/jeremymouton/cointipper	https://github.com/jeremymouton/cointipper
github.com	/ssorallen/jquery-scrollstop	https://github.com/ssorallen/jquery-scrollstop
github.com	/jquery/jquery-migrate/blob/master/src/event.js	https://github.com/jquery/jquery-migrate/blob/master/src/event.js#L25

Showing 1 to 10 of 90 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-

4.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

i installed 7 plugins just to choose the best colour picker as of right now. This one is ok but the Ultimate Color Picker is easier. With this you have to click a button to choose a colour instead of just clicking the extension and it should work already. This has only 9 slots, where as the other colour pickers can store 20+ colours. So basically you can't just click away. You need to click 4x to choose multiple colours. Sorry I got no time for that right now.

Ember N·11 Jun 2021

fantastic tool. Easy to use, does the job.

PowerBI Ninja·16 May 2021

Great extension. I like it!

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Just Color Picker

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews