MarsConnect

MarsConnect

ID: cldemkeecebhnjipedpghophnhhhdebi

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
0.1.12
Size
0.41 MB
Rating
0.0/5
Reviews
0
Users
867
Type
Extension
Updated
Aug 17, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No

This publisher

19 extensions, 15 no longer listed on the store

Publisher Contextual Analysis

Author
MarsLinkerView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
Yes
Is role-based
No
Mailbox exists
Yes
Website
Visit
Total Extensions
19
Active
1
Obsolete
15
Listed
19
Unlisted
0
Total Users
3,370

Not yet reviewed

Not scanned

Verdict for MarsConnect: Not scanned.

  • No one has reviewed this extension’s code yet, so we cannot vouch for it either way.
  • Check the permissions below to decide whether it asks for more than it needs.
Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
browsingData
Permission
High
This permission clears browsing data, history, and redis. Rated High because it can destroy evidence of malicious activity, clear security logs, and modify browser state.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk: • 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

By severity

Critical5
High3
Medium0
Low0

Versions scanned

Showing 1 of 6 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
0.1.48

Files with findings

3 distinct paths — top paths by unique finding count:

  • background.js6
  • chunks/NewOrder-B1IZvDJQ.js1
  • manifest.json1
S.No.
Category
Severity
File
Summary
Found in Version
1Credential Theft
critical
background.js (line 8783)This function sets arbitrary cookies (name, value, domain, path, httpOnly, sameSite) on target websites. The cookie payloads come from the C2 server, decoded via `ra()` from `h.coos` (line 8819). Setting server-suppli…
2Data Exfiltration
critical
chunks/NewOrder-B1IZvDJQ.js (line 662)The popup's "new order" flow fetches a token and target site from the C2 API at `auths.symbols.ltd:9528/marslinker/binding2/<code>` using a user-supplied subscription code ("订阅编码"). The returned token is stored and us…
3Network Interception
critical
background.js (line 9844)Network redirect/block rules are populated from `ur` (the server-supplied rule map at line 9741: `ur.set(l, a.rule)`), decoded via `ra()` and parsed as JSON. Any change to the server-side rule set is immediately appli…
4Remote Code Loading
critical
background.js (line 9744)The background service worker establishes a persistent STOMP WebSocket connection to `auths.symbols.ltd:9528`, a server completely unrelated to the publisher's stated domain (`marsead.com`). On connect it registers al…
5Remote Code Loading
critical
background.js (line 9889)`ra(U)` decodes a base64+zlib-compressed JavaScript string received from the C2 server (`cr` map is populated in the WebSocket `Ca` handler at line 9741: `cr.set(l, a.script)`). The decoded string is then injected int…
6Obfuscation
high
background.js (line 9822)A `debugger` statement fires every 100 ms via `setInterval` at extension startup. This is a well-known anti-analysis technique: when DevTools is open, the debugger pauses execution 10 times per second, making it extre…
7Other
high
manifest.json (line 31)The manifest declares `content-scripts/mainutils.js` as a MAIN-world content script (injected into the page's own JavaScript context), but this file is absent from the extension bundle. The background code sends serve…
8Unauthorized Data Collection
high
background.js (line 8821)The `wn` function, triggered by the C2 server (command `_c`/`_d` or token invalidation), erases all cookies, indexedDB, and localStorage for a target origin, then calls `od()` in the page context. This allows the oper…

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

No URLs found

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found
Showing 1 to 6 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

About this extension

MarsConnect helps you temporarily connect data between different browser clients and provides refined control.

Read the publisher’s full description

MarsConnect – Effortless Data Coordination Across Browser Clients MarsConnect is a powerful and versatile browser extension designed to facilitate seamless, temporary data sharing and coordination between different browser clients. Whether you are working across multiple devices, using separate browser profiles, or collaborating remotely with colleagues, MarsConnect bridges the gap between browser sessions without the need for complex setups or user accounts. Its refined control mechanisms and robust privacy practices provide users with a secure and flexible way to connect, synchronize, and transfer relevant data efficiently. At its core, MarsConnect leverages advanced browser APIs to relay information between various browser instances in real-time. The extension operates via a secure background service combined with content scripts, allowing users to push or pull diverse data types such as clipboard contents, session states, application-specific data, or custom messages. This ensures operations remain transient and fully user-controlled, with no permanent storage of data, minimizing privacy risks and increasing user trust. The user interface is designed to be modern, lightweight, and easily accessible from a browser action popup. Upon activation, MarsConnect offers straightforward options to share data, connect to other clients, or receive information. Behind the scenes, sophisticated event listeners monitor data signals and coordinate transfer operations instantly, all without relying on traditional cloud-based syncing or accounts. This temporary data exchange model ensures that your browser data remains yours, used only as long as you need it. MarsConnect also stands out with its refined control system, offering granular permissions and declarative network request handling. This capability enables it to interact reliably with almost any webpage, making it highly useful not only for everyday users but also for developers, testers, and power users who require precise control over their browser environment. Additionally, the extension includes built-in debugging and logging tools, providing transparency into background activity and facilitating troubleshooting. Ideal use cases for MarsConnect include: - Developers seeking quick and efficient cross-device testing. - Remote teams needing to transfer session data or share links during collaboration. - Users managing multiple browser profiles who want simplified clipboard or data transfers. MarsConnect is dedicated to security and privacy, providing an ad-free experience with no unnecessary tracking or cloud lock-in. It ensures your data transfers are transient and performed locally, establishing a direct and secure connection between browsers. Key Features: - Temporary, Real-Time Data Connectivity: Quickly and securely share or transfer data between different browser clients with operations that are ephemeral and user-controlled. - Simple and Intuitive Interface: Access MarsConnect via an easy-to-use popup menu with clear options to send, receive, or connect data. - Full Host and Network Access: Compatible with nearly any webpage, enhancing the extension’s flexibility and usability across diverse browsing contexts. - Robust Event Mechanism: Employs custom browser events and scripts to guarantee precise, fast, and reliable data relay. - Developer Utilities & Debugging: Built-in logging and utility scripts empower advanced users to troubleshoot or customize data transmission workflows. - Flexible Permissions: Makes use of declarative network request management, cookie handling, and alarms to provide granular control over browsing interactions. - Cross-Browser and Profile Support: Works smoothly across desktop browsers and different user profiles without requiring any user accounts. How It Works: 1. Install MarsConnect from your browser’s extension marketplace. 2. Activate the extension via the MarsConnect popup icon in your browser toolbar. 3. Select the send option, then copy the relevant text or session data and initiate pushing it to the MarsConnect client. 4. On a different browser instance, device, or profile, open MarsConnect and choose receive mode; the data is pulled promptly through a secure relay. 5. MarsConnect employs custom events and API messaging to manage the data exchange process, providing real-time feedback and notifications about success or failure. 6. For advanced users, developer utilities enable sophisticated data transmissions, specialized workflows, and debugging insights via detailed logs. 7. Upon completing your temporary session, the transferred data is securely cleared, and the connection is terminated under your control. Privacy: - No personal data collected. Data transfer is transient and initiated solely by the user; MarsConnect operates locally without storing or transmitting data to external servers. See our privacy policy.

Screenshots & videos

Screenshot 1

Install growth

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.