Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: 톡서랍 패스워드

CRITICAL RISKRemoved from Chrome Web Store

톡서랍 패스워드

ID: kbokjnkppakcahnnjaehnegicjelafhd

Could be malicious

Supported Languages

🇰🇷Korean

Extension Info & Metadata

Status

Removed

Version

1.3.9

Size

0.53 MB

Rating

4.5/5

Reviews

Users

5,000

Type

Extension

Updated

Jun 19, 2025

Publisher Contextual Analysis

Author: https://drive.kakao.com/View Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

5,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

내 소중한 아이디와 비밀번호, 톡서랍 패스워드로 브라우저에서도 안전하게 보관하고 편리하게 입력할 수 있어요.

■ 소중한 나의 로그인 정보, 안전한 톡서랍에 보관하세요. 기억하기도 어렵고, 아무 곳에나 기록해두기도 찜찜한 내 아이디와 비밀번호. 톡서랍 패스워드가 안전하게 보관해 드릴께요. 톡서랍에 보관한 데이터는 오직 나만 볼 수 있어요. ■ 클릭 한번으로 로그인해보세요. 톡서랍 패스워드에 로그인 정보를 저장해두면 로그인 할 사이트에서 자동으로 내 아이디와 비밀번호를 입력해드려요. 지금 바로 정보를 저장하고, 톡서랍 패스워드로 편리한 로그인을 경험해 보세요.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 9 ratings

Average Rating

Current: 4.89 / 5.0-0.11

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium3

Low1

Versions scanned

Showing 1 of 12 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.3.6 Code review	7

Extension Version	Code Review Findings
1.3.6	7

Files with findings

2 distinct paths — top paths by unique finding count:

background.bundle.js6
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	high	background.bundle.js (line 22522)	The extension stores the fully decrypted RSA private key in plaintext in `chrome.storage.session` under the key `"privateKey"`. This private key protects all user credentials; storing it in extension session storage m…	1.3.6
2	Network Interception	high	background.bundle.js (line 21278)	The extension dynamically installs declarativeNetRequest rules to rewrite the `Origin` request header to match Kakao API domains (drawer-api.kakao.com and zzng-webapp-api.kakao.com) on all non-GET requests originating…	1.3.6
3	Privilege Escalation	high	manifest.json (line 22)	The extension injects content scripts into every URL (`:///*`) and makes `webui.html` and `webui.bundle.js` web-accessible from any page. This attack surface means the content script runs in the renderer process of …	1.3.6
4	Code Injection	medium	background.bundle.js (line 18185)	The extension uses the `Function()` constructor to dynamically compile and execute JavaScript code from strings (a lodash template engine pattern). While this is standard lodash behavior, its presence in a password ma…	1.3.6
5	Privilege Escalation	medium	background.bundle.js (line 20199)	The extension programmatically disables Chrome's built-in password saving feature via the `privacy` permission, forcing users to depend entirely on Kakao's own password manager infrastructure. This is called during co…	1.3.6
6	Unauthorized Data Collection	medium	background.bundle.js (line 19975)	All API requests to Kakao's backend are made with `credentials: "include"`, which attaches browser cookies to every call. Combined with the Origin header spoofing via declarativeNetRequest and the broad `:///*` host…	1.3.6
7	Tracking	low	background.bundle.js (line 23007)	The extension fetches favicons for saved credential entries from Google's public favicon service, which discloses the domain names of every site for which a user has stored a password to Google's servers. This constit…	1.3.6

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


sandbox-wallet-api.devel.kakao.com	/papi/web/pin/v1	https://sandbox-wallet-api.devel.kakao.com/papi/web/pin/v1
cbt-wallet-api.kakao.com	/papi/web/pin/v1	https://cbt-wallet-api.kakao.com/papi/web/pin/v1
zzng-webapp-api.kakao.com	/papi/web/pin/v1	https://zzng-webapp-api.kakao.com/papi/web/pin/v1
redux.js.org	/Errors	https://redux.js.org/Errors?code=
bit.ly	/3cXEKWf	https://bit.ly/3cXEKWf
npms.io	/search	https://npms.io/search?q=ponyfill.
sandbox-accounts.kakao.com	/login	https://sandbox-accounts.kakao.com/login
accounts.kakao.com	/login	https://accounts.kakao.com/login
drawer-sandbox.kakao.com	-	https://drawer-sandbox.kakao.com
drawer-cbt.kakao.com	-	https://drawer-cbt.kakao.com

Showing 1 to 10 of 50 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.3.101.112	IPv4	-
1.3.14.3	IPv4	-
1.101.3.4	IPv4	-
1.9.22.1	IPv4	-
1.12.10.1	IPv4	-
1.12.1.1	IPv4	-
1.12.1.2	IPv4	-
1.12.1.3	IPv4	-
1.12.1.4	IPv4	-
1.12.1.5	IPv4	-
1.12.1.6	IPv4	-
2.5.4.3	IPv4	-
2.5.4.4	IPv4	-
2.5.4.5	IPv4	-
2.5.4.6	IPv4	-
2.5.4.7	IPv4	-
2.5.4.8	IPv4	-
2.5.4.9	IPv4	-
2.5.4.10	IPv4	-
2.5.4.11	IPv4	-
2.5.4.12	IPv4	-
2.5.4.13	IPv4	-
2.5.4.15	IPv4	-
2.5.4.17	IPv4	-
2.5.4.42	IPv4	-
1.3.6.1	IPv4	-
60.2.1.2	IPv4	-
60.2.1.3	IPv4	-
2.5.29.1	IPv4	-
2.5.29.2	IPv4	-
2.5.29.3	IPv4	-
2.5.29.4	IPv4	-
2.5.29.5	IPv4	-
2.5.29.6	IPv4	-
2.5.29.7	IPv4	-
2.5.29.8	IPv4	-
2.5.29.9	IPv4	-
2.5.29.10	IPv4	-
2.5.29.11	IPv4	-
2.5.29.12	IPv4	-
2.5.29.13	IPv4	-
2.5.29.14	IPv4	-
2.5.29.15	IPv4	-
2.5.29.16	IPv4	-
2.5.29.17	IPv4	-
2.5.29.18	IPv4	-
2.5.29.19	IPv4	-
2.5.29.20	IPv4	-
2.5.29.21	IPv4	-
2.5.29.22	IPv4	-
2.5.29.23	IPv4	-
2.5.29.24	IPv4	-
2.5.29.25	IPv4	-
2.5.29.26	IPv4	-
2.5.29.27	IPv4	-
2.5.29.28	IPv4	-
2.5.29.29	IPv4	-
2.5.29.30	IPv4	-
2.5.29.31	IPv4	-
2.5.29.32	IPv4	-
2.5.29.33	IPv4	-
2.5.29.34	IPv4	-
2.5.29.35	IPv4	-
2.5.29.36	IPv4	-
2.5.29.37	IPv4	-
2.5.29.46	IPv4	-
2.5.29.54	IPv4	-
5.5.7.1	IPv4	-
5.5.7.3	IPv4	-

Showing 1 to 69 of 70 rows

Rows per page:

1.8 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

패스워드 관리 프로그램(1password, last pass, bitwarden) 몇 가지를 사용하다가 카카오톡 톡서랍에 비밀번호 관리기능이 있다고해서 사용해보았습니다. 톡서랍에서 사이드로 제��해주는 서비스라서 매우 허접합니다. 단축키지원, 강력한 패스워드 생성등 별로 되는게 없습니다. 암호저장, 불러오기만 되는 매우 허접한 프로그램입니다.

이(

이현수 (룰군)·13 Jan 2023

패스워드 관리 프로그램(1password, last pass, bitwarden) 몇 가지를 사용하다가 카카오톡 톡서랍에 비밀번호 관리기능이 있다고해서 사용해보았습니다. 톡서랍에서 사이드로 제��해주는 서비스라서 매우 허접합니다. 단축키지원, 강력한 패스워드 생성등 별로 되는게 없습니다. 암호저장, 불러오기만 되는 ��우 허접한 프로그램입니다.

이(

이현수 (룰��)·13 Jan 2023

패스워드 관리 프로그램(1password, last pass, bitwarden) 몇 가지를 사용하다가 카카오�� 톡서랍에 비밀번호 관리기능이 있다고해서 사��해보았습니다. 톡서랍에서 사��드로 제공해주는 서비스라서 매우 허접합니다. 단축키��원, ��력한 패스워드 생성�� 별로 되는게 없습니다. 암호저장, 불��오기만 되�� 매우 허접한 프로그램입니다.

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

톡서랍 패스워드

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 12 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating