Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Live New Tab

CRITICAL RISKRemoved from Chrome Web Store

Live New Tab

ID: bibkbgpkoakcoeiefhhbgkclkbmengmj

Could be malicious

Extension Info & Metadata

Status

Removed

Version

1.2

Size

61.93 MB

Rating

4.6/5

Reviews

Users

50,879

Type

Extension

Updated

Mar 18, 2021

Publisher Contextual Analysis

Trusted

Author: New TabsView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

52,146

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Get cool live animated backgrounds in a new tab. Cheer yourself up for every day!

We have collected all the best functions that are needed on a new tab. An accurate weather widget will always show what is happening outside. Legal note: By clicking "Add to Chrome" you accept and agree to installing Live New Tab and setting new tab search to Bing that provided by the service, Terms of Use and Privacy Policy. Privacy Policy: https://newtabs.org/policy EULA: https://newtabs.org/terms About us: https://newtabs.org/about Tired of boring low quality wallpapers? We made awesome ANIMATED backgrounds for you! Surprise your friends, they have not seen this before. Do you want to open YouTube in one click? - Just add a shortcut to your Live New Tab. Add icons to the most popular sites in just a few clicks! We have a dark theme for those who like to work in the dark.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium2

Low0

Versions scanned

Showing 1 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1 Code review	3

Extension Version	Code Review Findings
1.1	3

Files with findings

2 distinct paths — top paths by unique finding count:

js/index.js2
newtab.html1

S.No.	Category	Severity	File	Summary	Found in Version
1	Unauthorized Data Collection	high	js/index.js (line 213)	The extension enumerates the user's most-visited sites via chrome.topSites and then transmits every one of those URLs to a third-party server (newtabs.org) in the query string under the guise of fetching favicons. Thi…	1.1
2	Tracking	medium	newtab.html (line 67)	The default search form action points to newtabs.org (a domain controlled by the extension publisher) rather than a well-known search engine. Combined with index.js line 276-283 forcing fallthrough submits to newtabs.…	1.1
3	Unauthorized Data Collection	medium	js/index.js (line 145)	Precise geolocation coordinates (lat/lon) are transmitted to a third-party weather API on every new tab load, with a hard-coded API key exposed in client code. While OpenWeatherMap is a legitimate provider, continuous…	1.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/master/LICENSE	https://github.com/twbs/bootstrap/blob/master/LICENSE
www.w3.org	/TR/mediaqueries-4/	https://www.w3.org/TR/mediaqueries-4/#mq-min-max\n//
bugs.webkit.org	/show_bug.cgi	https://bugs.webkit.org/show_bug.cgi?id=178261\n//\n//
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
github.com	/necolas/normalize.css/blob/master/LICENSE.md	https://github.com/necolas/normalize.css/blob/master/LICENSE.md
github.com	/necolas/normalize.css/n/n/n//	https://github.com/necolas/normalize.css\n\n\n//
github.com	/suitcss/base/n[tabindex=/	https://github.com/suitcss/base\n[tabindex=\
github.com	/twbs/bootstrap/issues/19402/n/na:not([href	https://github.com/twbs/bootstrap/issues/19402\n\na:not([href
github.com	/twbs/bootstrap/issues/26878/n	https://github.com/twbs/bootstrap/issues/26878\n

Showing 1 to 10 of 100 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

5.0 out of 5 · 2 most recent reviews

Text reviews

Positive

Negative

Все хорошо

АК

Аня Крымская·18 Feb 2021

Tim: Excellent extension, location determines quickly. I like how it works.

)

):·16 Feb 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Live New Tab

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 3 Versions3

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating