Chrome Web Store
4Versions
1Code reviewed

No malware found

In code review (v1.0.51)

Our reviewer read version 1.0.51 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

41 indicators in this extension

41 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Mangoboard ColorPicker, used by 100,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can read and change data on all websites and can inject scripts into pages.

Key findings

  • High

    Other

    The bundled manifest declares manifest_version 2 and lists <all_urls> in permissions. However, the published CWS summary indicates manifest_version 3 with host_permissions: ["<all_urls>"] and an additional "scripting" permission. This mismatch suggests the live extension may have a different codebase with potentially broader capabilities (e.g., chrome.scripting API). The provided source may not accurately reflect the installed extension.

Analyst notes

The extension is a color picker with local storage and no network exfiltration. It communicates externally only to well-defined first-party domains ([domain withheld], [domain withheld], mcontents.mil) via externally_connectable, and only for triggering the picker. No sensitive data is collected or transmitted. The ML model’s low score (0.00) and the trusted publisher corroborate a benign verdict. The risk-engine report over-weighted broad permissions and manifest v2. The manifest mismatch between the provided source and the CWS listing (v2 vs v3) is noted but does not indicate malice.

Mangoboard ColorPicker

Mangoboard ColorPicker Chrome extension security report

ID: cmncbfaaiogmfeelmicmaafbibedljpk

Supported Languages

🇰🇷Korean

Extension Info & Metadata

Status
Active
Version
1.0.61
Size
0.17 MB
Rating
2.7/5
Reviews
37
Users
100,000
Type
Extension
Updated
Oct 1, 2024
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
https://www.mangoboard.net/
Country
대한민국
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
611 KnK Tower, Yeongsin-ro 220 Seoul, Yeondeungpo-gu 07228 대한민국
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
100,000

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.

41 indicators in this extension

41 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

망고보드 컬러픽커는 브라우저 내의 색상을 뽑아낼 수 있습니다.

Read the publisher’s full description

망고보드(www.mangoboard.net) 에디터에서 사용할 수 있는 컬러피커입니다. 디자인 요소의 색상을 변경할 때, 작업화면 내의 색상을 바로 적용할 수 있습니다. ※ 설치후에 정상 작동 하지 않는 경우 크롬 브라우저를 전체 종료후 다시 시작해 주시기 바랍니다. ※ 크롬 시크릿 모드나 버전이 낮은 경우 실행이 되지 않을 수 있습니다. 반드시 최신 버전의 크롬을 사용하시기 바랍니다.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
36

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

41 indicators in this extension

41 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.0.51
Latest
0.17 MBNo malware found0
3e6d46c74759455ad94ba48b63161d2ac0d52142911cecccfd1d25eb911df2b1
1.0.5
0.16 MBNot scanned—
3e6d46c74759455ad94ba48b63161d2ac0d52142911cecccfd1d25eb911df2b1
1.0.3
0.16 MBNot scanned—
3e6d46c74759455ad94ba48b63161d2ac0d52142911cecccfd1d25eb911df2b1
1.0.61
0.17 MBNot scanned—
d18bf2acdb07b06b29e3480593a9fdcc5187ce0e789897f4a95733aea5c84a6f
Showing 1 to 4 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Tools