Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Live cat

CRITICAL RISKRemoved from Chrome Web Store

Live cat

ID: cofmpiaddiioohphmmgjnbcpfoiknnkh

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.23.2

Size

0.44 MB

Rating

4.3/5

Reviews

Users

115,458

Type

Extension

Updated

May 8, 2023

Publisher Contextual Analysis

Trusted

Author: http://mediatools.ccView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

115,458

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Extension is looking for HLS and DASH videos

This extension show you links to live streams when you are watching it and let you to download it in MP4 in selected quality.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+24.04%(+22,373 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 59 ratings

Average Rating

Current: 4.51 / 5.0+0.20

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium3

Low0

Versions scanned

Showing 1 of 8 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.23.0 Code review	5

Extension Version	Code Review Findings
1.23.0	5

Files with findings

3 distinct paths — top paths by unique finding count:

background.js3
contentScript.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	high	background.js (line 1545)	The background worker exposes a `remoteFetch` (and chunked `mf`) action via chrome.runtime.onMessage that lets the bridged page (mediatools.cc / mediatools.rndnm.com) instruct the extension to issue arbitrary cross-or…	1.23.0
2	Privilege Escalation	high	contentScript.js (line 1331)	The content script accepts a window.postMessage from the page (mediatools.cc) carrying a MessagePort and immediately wires it into a generic RPC bridge that forwards arbitrary `action` payloads (instanceInit, instance…	1.23.0
3	Code Injection	medium	background.js (line 1723)	On startup the background worker dynamically builds a JavaScript string by concatenating a function's toString() output and injects it into every frame of any open mediatools.cc / mediatools.rndnm.com tab via chrome.t…	1.23.0
4	Unauthorized Data Collection	medium	background.js (line 1472)	Background service worker registers a webRequest listener on <all_urls> that inspects response headers from every site the user visits and records URL, method, type, tabId, and tab title whenever a media MIME type is …	1.23.0
5	Unauthorized Data Collection	medium	manifest.json (line 19)	The manifest grants host_permissions for every http(s) URL plus the `tabs` and `webRequest` permissions, yet the only content-script surface is three media-tooling domains. This wide grant is required only to satisfy …	1.23.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


time.akamai.com	-	https://time.akamai.com/?iso&ms
conformance.dashif.org	-	https://conformance.dashif.org/
www.smpte-ra.org	/schemas/2052-1/2010/smpte-tt	http://www.smpte-ra.org/schemas/2052-1/2010/smpte-tt
www.smpte-ra.org	/schemas/2052-1/2013/smpte-tt	http://www.smpte-ra.org/schemas/2052-1/2013/smpte-tt
www.w3.org	/XML/1998/namespace	http://www.w3.org/XML/1998/namespace
schemas.xmlsoap.org	/soap/envelope/	http://schemas.xmlsoap.org/soap/envelope/
dashif.org	/thumbnail_tile	http://dashif.org/thumbnail_tile
dashif.org	/guidelines/thumbnail_tile	http://dashif.org/guidelines/thumbnail_tile
y	-	http://y
www.w3.org	/ns/ttml	http://www.w3.org/ns/ttml#styling

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


7.6.2.4	IPv4	-

3.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

¡El Gato Está Vivo! - (14-AGO-23)

Sergio Andres Africano Alarcon·14 Aug 2023

La extensión estuvo funcionando de los más normal un par de semanas y desde hace 5 días hasta la fecha no funciona y arroja el siguiente error "Supported formats not found!". Soy Desarrollador web si necesitan ayuda puedo colaborar 😉

Juan Ramirez Lozano·22 Jul 2023

no sirve para descargar casi nada

DR.jack Bright·

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Live cat

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 8 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating