Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: McAfee WebAdvisor For Mac

CRITICAL RISKRemoved from Chrome Web Store

McAfee WebAdvisor For Mac

ID: cdchjnfonmcmbclbcbcicknddglglnha

Could be malicious

Supported Languages

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇭🇺Hungarian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇵🇱Polish

🇷🇺Russian

🇸🇰Slovak

🇪🇸Spanish

🇸🇪Swedish

🇹🇷Turkish

Extension Info & Metadata

Status

Removed

Version

1.0.0.8

Size

0.19 MB

Rating

4.0/5

Reviews

Users

351,841

Type

Extension

Updated

Aug 13, 2020

Publisher Contextual Analysis

Author: McAfeeSiteAdvisorView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

351,841

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

McAfee WebAdvisor For Mac

McAfee Web Advisor For Mac protects your Mac from online threats, called web-based threats, when you browse sites. The software monitors each site that you access or browse, validates its safety ratings, and allows or blocks the site according to the configuration. McAfee Web Advisor For Mac provides safety ratings at two levels. In the browser, the software: • Displays a safety rating icon for each site that the search engine lists • Displays a safety rating button for each site The default setting blocks access to malicious sites that can harm your Mac. This extension is provided by McAfee and it works in conjunction with the McAfee Live Safe product.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High5

Medium0

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0.8 Code review	6

Extension Version	Code Review Findings
1.0.0.8	6

Files with findings

5 distinct paths — top paths by unique finding count:

Resources/main.js2
background.js1
ContentOnDocStart.js1
manifest.json1
Resources/balloon.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	background.js (line 4)	The background page connects to a native messaging host and directly evals the content of the first message received (`message[1]`). This is a critical remote code execution vector: whatever JavaScript string the nati…	1.0.0.8
2	Code Injection	high	manifest.json (line 10)	The extension's Content Security Policy explicitly includes `'unsafe-eval'`, which lifts the browser's built-in safeguard against dynamic code execution. This is required to support the `eval()` calls found in backgro…	1.0.0.8
3	Code Injection	high	Resources/main.js (line 15)	The script reads the `innerHTML` of a DOM element (id `saBaseUrl`) injected into the host page and passes it directly to `eval()`. Because this script runs inside every web page as a content script resource, a malicio…	1.0.0.8
4	Code Injection	high	Resources/main.js (line 434)	Two additional `eval()` calls in `make_popup()`: first it evals the `innerHTML` of a script element whose id is derived from untrusted page data (`varName = "jsonRsp" + uid`), then it evals the variable name string di…	1.0.0.8
5	Code Injection	high	Resources/balloon.js (line 1)	The minified balloon.js (the bundled counterpart to main.js) evals raw HTML attribute values (`mcBalloonConfig`, `mcLinkinfo`) read from DOM elements on the host page. Any site the user visits could inject these attri…	1.0.0.8
6	Phishing	high	ContentOnDocStart.js (line 4)	The content script runs at `document_start` on every HTTP/HTTPS page and listens for messages from the background page. Upon receiving a `navigate` message, it sets `window.location.href` to a background-controlled UR…	1.0.0.8

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
www.w3.org	/1999/xhtml	http://www.w3.org/1999/xhtml
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceRef	http://ns.adobe.com/xap/1.0/sType/ResourceRef#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
www.siteadvisor.com	/securesearch/	http://www.siteadvisor.com/securesearch/
*	/*	http:///
*	/*	https:///
clients2.google.com	/service/update2/crx	http://clients2.google.com/service/update2/crx

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.0.0.8	IPv4	-

2.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

I've owned McAfee for a few years now(my subscription was a 3 years sub" and I've had this installed on my pc for the same length of time... it worked for 1 year and hasn't worked since... I have my set of sites that I use so never thought to review but I'm wanting to check some sites with safety which I can't check anymore coz this app simply doesn't work... im on the latest version of Windows as well

Jack Ross·8 Jun 2021

cheese

Ichiraku Ramen Shop·16 Sept 2020

estoy feliz

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

McAfee WebAdvisor For Mac

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews