Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Link Extractor

CRITICAL RISKRemoved from Chrome Web Store

Link Extractor

ID: ijknljdfdogfmhlbcfiohoaihoeegecc

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

0.3

Size

0.86 MB

Rating

3.8/5

Reviews

Users

4,873

Type

Extension

Updated

Apr 14, 2019

Publisher Contextual Analysis

Trusted

Author: ultimateblaze1View Profile

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

4,873

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

An easy to use extractor for hyperlinks on any page

Easily extract all links from any website by just pressing the Apps icon. You can also filter the result how you like.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+17.03%(+709 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 6 ratings

Average Rating

Current: 3.83 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High0

Medium2

Low3

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.3 Code review	5

Extension Version	Code Review Findings
0.3	5

Files with findings

4 distinct paths — top paths by unique finding count:

js/links.js2
js/background.js1
js/contentscript.js1
js/preamble.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Unauthorized Data Collection	medium	js/contentscript.js (line 40)	The content script automatically scrapes all hyperlinks from every page it is injected into and transmits the full link data — including query strings, hash fragments, and link text — to the background script. Query s…	0.3
2	Unauthorized Data Collection	medium	js/background.js (line 64)	The background script collects all hyperlinks from any visited page along with the full source tab URL and stores them in an in-memory object (tabData) on the background page's window scope. While data stays within th…	0.3
3	Code Injection	low	js/links.js (line 407)	The code uses both the Function constructor and indirect eval to obtain the global object. While this is a common webpack/lodash environment-detection idiom, these dynamic code execution patterns bypass strict mode pr…	0.3
4	Remote Code Loading	low	js/preamble.js (line 39)	The webpack runtime dynamically creates and injects script tags whose src is built by concatenating a configurable base path (__webpack_require__.p) with a chunk ID. In this build the base path is empty (resolving to …	0.3
5	Unauthorized Data Collection	low	js/links.js (line 36)	Passing null to chrome.storage.sync.get retrieves every stored key-value pair without filtering, meaning any sensitive data stored by other extension modules is fully exposed to this page context. The code also reads …	0.3

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


*	/*	http:///
*	/*	https:///
jedwatson.github.io	/classnames	http://jedwatson.github.io/classnames
github.com	/webpack-contrib/style-loader	https://github.com/webpack-contrib/style-loader#insertat
facebook.github.io	/react/docs/error-decoder.html	http://facebook.github.io/react/docs/error-decoder.html?invariant=
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1998/Math/MathML	http://www.w3.org/1998/Math/MathML
www.w3.org	/1999/xhtml	http://www.w3.org/1999/xhtml
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/XML/1998/namespace	http://www.w3.org/XML/1998/namespace

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.8 out of 5 · 6 most recent reviews

Text reviews

Positive

Negative

such an amazing thing helped me so much and saved me time and headaches when i need to open alot of links and u also do the option to order it by domains which is awsome af <3 NO COPMLAINS MUCH LOVE <3 stay blessed

Dyke Bunion·25 Jul 2021

It takes this url sofascore.com/cf-fuenlabrada-espanyol/ogbsXbo but not all of this https://www.sofascore.com/football/2020-11-14 pls update soe it takes href= domain. very close to be right super fast

Jan Jørgensen·10 Nov 2020

Brilliant thanks !

DNA Dan

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Link Extractor

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating