Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Linkedin to Resume - Rezi.ai

CRITICAL RISKRemoved from Chrome Web Store

Linkedin to Resume - Rezi.ai

ID: nlompgnphpgadnibpppbiddjccoeopmn

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

2.1.3

Size

3.94 MB

Rating

4.1/5

Reviews

Users

5,000

Type

Extension

Updated

Mar 7, 2022

Publisher Contextual Analysis

Author: http://rezi.aiView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

5,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Use your Linkedin Profile to create an ATS optimized resume in seconds.

Use your Linkedin Profile to create an ATS optimized resume in seconds for FREE. You have an awesome Linkedin profile. Why spend time writing a resume? Linkedin to Resume allows you to save time while creating a resume by leveraging your Linkedin. It's a smarter way to create a resume for serious professionals. ✔ Totally free - enjoy as much as required. You'll never be charged & no card needed ✔ The fastest way to go from Linkedin profile to perfect resume without any effort ✔ Linkedin to Resume is actively supported and documented by Rezi development team 3 Easy step to use Linkedin to Resume ▸ Export Linkedin Profile: Download your profile as a .REZI file ▸ Upload Profile to Rezi: Upload your .REZI file to create a resume ▸ Finalise Your Resume: Finish creating your resume on Rezi 🚀 Continue Building your resume with industry-leading features ▸ A.I. keyword Targeting ▸ A.I. Cover Letter (1-click cover letter generation) ▸ A.I. Bullet point writer ▸ A.I. Resume summary writer ▸ Real-Time Content Analysis ▸ Unlimited Resumes & Cover Letters ▸ .DOCX, .PDF and Google Drive Export ▸ Sharable Resume Link ▸ Section-By-Section Video Guides ▸ ATS Optimizes Resume Formats ▸ Rezi Cover Letter Builder Guide & Support: https://www.rezi.ai Privacy Policy: https://www.rezi.ai/privacy

User Growth

Showing data from Jan 01, 2022 to Mar 27, 2022

Versions

+25%(+1,000 users)

Compared to 3 months ago

5 versions released in this period

Rating Count

Total: 24 ratings

Average Rating

Current: 4.13 / 5.0-0.66

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High3

Medium2

Low0

Versions scanned

Showing 1 of 13 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.1.0 Code review	6

Extension Version	Code Review Findings
2.1.0	6

Files with findings

2 distinct paths — top paths by unique finding count:

src/inject/inject.js5
src/page_action/page_action.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	src/inject/inject.js (line 1146)	The entire scraped LinkedIn profile (containing name, email, work history, education, skills, etc.) is AES-encrypted using the hardcoded passphrase 'msKurN6Tu4faByCci5' baked directly into source code. Because the key…	2.1.0
2	Unauthorized Data Collection	high	src/inject/inject.js (line 874)	The extension programmatically clicks the LinkedIn 'contact info' modal to reveal and then harvest the target's private email address, website, and LinkedIn URL — fields that are only exposed after a deliberate user c…	2.1.0
3	Unauthorized Data Collection	high	src/inject/inject.js (line 1118)	The extension covertly injects hidden iframes into the LinkedIn page DOM, pointed at nine different LinkedIn sub-pages (experience, education, skills, certifications, projects, etc.) that are not loaded in the visible…	2.1.0
4	Unauthorized Data Collection	high	src/inject/inject.js (line 1139)	The full pipeline collects nine distinct categories of LinkedIn profile data (work experience, education, skills, certifications, projects, coursework, volunteering, organizations, languages) plus contact info and sum…	2.1.0
5	Tracking	medium	src/inject/inject.js (line 626)	The bundled SJCL PRNG implementation includes a `keyboardCollector` that registers a `keypress` listener on the LinkedIn page window — capturing timing of every keystroke (used nominally for entropy). While `startColl…	2.1.0
6	Unauthorized Data Collection	medium	src/page_action/page_action.js (line 60)	The encrypted scraped profile ciphertext (iv + salt + ciphertext) is written to `localStorage` under the key `rezi_ext_dt` and persisted across browser sessions without expiry or user notification. Because the hardcod…	2.1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.rezi.ai	-	https://www.rezi.ai
www.linkedin.com	/*	https://www.linkedin.com/*
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/tiff/1.0/	http://ns.adobe.com/tiff/1.0/
ns.adobe.com	/exif/1.0/	http://ns.adobe.com/exif/1.0/
www.linkedin.com	/in/	https://www.linkedin.com/in/
app.rezi.io	-	https://app.rezi.io?imp=linkedin

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.3 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

the process has stopped on certificates and won't go any further.

Jan Tyc·17 Mar 2022

It's not working for me too

Mohamed Almenyawe·7 Mar 2022

I'm using a Mac on Mac OS Monterey (12.1). The extension starts the process but gets hung up on Searching for Organizations. Is there a fix?

Mark Vogel·

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Linkedin to Resume - Rezi.ai

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 13 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating