Chrome Web Store
15Versions
1Code reviewed

No malware found

In code review (v2.3.3)

Our reviewer read version 2.3.3 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

3 indicators in this extension

3 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Link to Text Fragment, used by 90,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can inject scripts into pages.

Key findings

  • High

    Other

    The bundled declares manifest_version: 2 with permissions ['activeTab','contextMenus','clipboardWrite','storage'] and optional host permissions. The live CWS published manifest summary, however, lists manifest_version: 3 with permissions ['activeTab','contextMenus','clipboardWrite','storage','scripting','offscreen'] and no optional host permissions. This mismatch could indicate a stale update or a version mismatch, though no malicious intent is apparent.

Analyst notes

The extension's code performs exactly its stated purpose: generating text fragment links from user selections and copying them to clipboard. No data exfiltration, tracking, or unauthorized network requests were found. The permissions used are essential for this functionality. The manifest discrepancy (MV2 vs. MV3) appears to be a publishing artifact rather than a malicious indicator, especially given the publisher is Google LLC with a trusted badge and long history. The ML model's risk flags (clipboardWrite, activeTab, etc.) are false positives in this context; the extension does not abuse these permissions.

Link to Text Fragment

Link to Text Fragment Chrome extension security report

ID: pbcodcjpfjdpcineamnnmbkkmkdpajjg

Supported Languages

🇪🇸Catalan
🇺🇸English
🇫🇷French
🇩🇪German
🇮🇱Hebrew
🇰🇷Korean
🇪🇸Spanish

Extension Info & Metadata

Status
Active
Version
2.5.1
Size
0.09 MB
Rating
3.7/5
Reviews
155
Users
90,000
Type
Extension
Updated
Feb 4, 2025
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
Google LLC
Country
United States
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
1600 Amphitheatre Parkway Mountain View, CA 94043 United States
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
90,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 2

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
clipboardWrite
Permission
High
This permission allows modification of clipboard content. Rated High because it can inject malicious content into the clipboard, modify copied passwords, and manipulate copied data.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

3 indicators in this extension

3 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Browser extension that allows for linking to arbitrary text on a page.

Read the publisher’s full description

Update: Chrome now has a built-in feature ("Copy Link to Highlight" in the context menu) to copy text fragment links. The extension has an additional feature that allows you to also copy rich links. You can activate this feature in the options. This extension allows for easily creating a special link to the currently selected text on a page via the context menu. When opening such a special link, a compatible browser will scroll the selected text into view and highlight it. Usage instructions: • Select the text that you want to link to. • Right-click and choose "Copy Link to Selected Text" from the context menu. • If the link creation succeeded, the selected text will be briefly highlighted in yellow. • Paste your link wherever you want to share it. • 💡 Pro-tip: you can assign a keyboard shortcut to the copy action! 📖 Article: https://web.dev/text-fragments/ 🧩 Extension: https://chrome.google.com/webstore/detail/link-to-text-fragment/pbcodcjpfjdpcineamnnmbkkmkdpajjg 🎬 Demo video: https://www.youtube.com/watch?v=Y5DmGqnzvBI For more information, see the Text Fragments specification (https://wicg.github.io/scroll-to-text-fragment/) where this feature is described. This extension is open-source (https://github.com/GoogleChromeLabs/link-to-text-fragment) and licensed under the terms of the Apache 2.0 license. By installing this item, you agree to the Google Terms of Service and Privacy Policy (https://www.google.com/intl/en/policies/).

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
3

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

3 indicators in this extension

3 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
2.5.0
Latest
0.09 MBNot scanned—
ba423baeb16b5bff3f1cf3540ac8787fcb00aed427ecf8cf6d11f8f5725af726
2.4.0
0.09 MBNot scanned—
ba423baeb16b5bff3f1cf3540ac8787fcb00aed427ecf8cf6d11f8f5725af726
2.3.3
0.09 MBNo malware found0
b5f548e828c897092408300a0e8583f68843da33ea91bac7fd34906700ca26d5
2.3.2
0.09 MBNot scanned—
b5f548e828c897092408300a0e8583f68843da33ea91bac7fd34906700ca26d5
2.3.1
0.09 MBNot scanned—
b5f548e828c897092408300a0e8583f68843da33ea91bac7fd34906700ca26d5
2.3.0
0.09 MBNot scanned—
b5f548e828c897092408300a0e8583f68843da33ea91bac7fd34906700ca26d5
2.2.0
0.09 MBNot scanned—
b5f548e828c897092408300a0e8583f68843da33ea91bac7fd34906700ca26d5
2.1.1
0.08 MBNot scanned—
b5f548e828c897092408300a0e8583f68843da33ea91bac7fd34906700ca26d5
2.1.0
0.08 MBNot scanned—
b5f548e828c897092408300a0e8583f68843da33ea91bac7fd34906700ca26d5
2.0.1
0.08 MBNot scanned—
b5f548e828c897092408300a0e8583f68843da33ea91bac7fd34906700ca26d5
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Workflow & Planning