Chrome Web Store
39Versions
1Code reviewed

No malware found

In code review (v2.7.6)

Our reviewer read version 2.7.6 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

80 indicators in this extension

80 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Meet Attendance, used by 300,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 2 findings (1 high, 1 medium), led by other. It comes from a trusted publisher and was last updated in February 2023.

Key findings

  • High

    Other

    The manifest bundled in the extension package (version 2.7.6) declares manifest_version 2 and lacks 'tabs' and 'alarms' permissions, whereas the live CWS published summary reports manifest_version 3 and includes those permissions. This discrepancy could indicate a delayed-malicious update or an unreviewed change. Without access to the live code, it represents a risk.

  • Medium

    Unauthorized Data Collection

    The extension sends the user's email address to an external server (publisher's cloud function) to verify subscription status. This collects personally identifiable information (email) not disclosed in the CWS privacy practices (currently 'none declared'). Though the destination is the publisher's domain and may be covered by their privacy policy, the Chrome Web Store requires explicit declaration.

Analyst notes

The extension's core functionality (collecting attendance from Google Meet into a Google Sheet) is legitimate and uses necessary Google APIs. The code is not obfuscated and performs no hidden data exfiltration. However, the extension sends the user's email to the publisher's cloud function for subscription checks without declaring this in the CWS data collection disclosure, and the bundled manifest differs from the published listing (MV2 vs MV3, additional permissions). These issues lower confidence but are not evidence of malware.

Meet Attendance

Meet Attendance Chrome extension security report

ID: nenibigflkdikhamlnekfppbganmojlg

Supported Languages

🇪🇸Catalan
🇹🇼Chinese (Traditional)
🇨🇿Czech
🇺🇸English
🇰🇷Korean
🇪🇸Spanish

Extension Info & Metadata

Status
Active
Version
3.0.29
Size
0.69 MB
Rating
2.8/5
Reviews
352
Users
300,000
Type
Extension
Updated
Feb 21, 2023
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
11extensions
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
claycodes.org
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
11
Active
11
Obsolete
0
Listed
11
Unlisted
0
Users
1,160,599

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
identity.email
Permission
High
This permission directly accesses the user's email address. Rated High because it reveals personally identifiable information and can be used for tracking or targeting.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

80 indicators in this extension

80 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Collect attendance in a Google Sheet from a Google Meet.

Read the publisher’s full description

Meet Attendance requires logging in and Syncing your Chrome browser. When in Meet select the participants view. Accept the permissions. Close and reopen the people to capture attendance. Click the Attendance icon to open the Attendance Spreadsheet. Mouse over for further options, Add a sheet in the Spreadsheet, Create a new Spreadsheet, Turn Attendance collection off, Auto Scroll through participants, Snapshot attendance. Attendance duration will be tracked. Premium: Compare your classroom roster to the participants in the meet. Know who is absent from your Meet. Set the frequency for auto capturing attendance. Leaving the Participants view open attendance will be captured at the set frequency. Subscribe to premium for $2.50 monthly. Subscription management at claycodes.web.app

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
78
IPv4
2

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

80 indicators in this extension

80 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
3.0.27
Latest
0.69 MBNot scanned—
52837ffd0aefe61ee22829c4d6899e61e16b8bc960fe188c2af03946f340de3a
3.0.26
0.69 MBNot scanned—
e842ace883a032318c17f0b1e2e249220ab2f96a80c4e63401937b8b1526b594
3.0.25
0.37 MBNot scanned—
76905a0af57384b9fb7e101c6cdc6d501b89816a107c9092fbb45a461350d39c
3.0.24
0.37 MBNot scanned—
76905a0af57384b9fb7e101c6cdc6d501b89816a107c9092fbb45a461350d39c
3.0.22
0.37 MBNot scanned—
76905a0af57384b9fb7e101c6cdc6d501b89816a107c9092fbb45a461350d39c
3.0.21
0.37 MBNot scanned—
76905a0af57384b9fb7e101c6cdc6d501b89816a107c9092fbb45a461350d39c
3.0.20
0.37 MBNot scanned—
76905a0af57384b9fb7e101c6cdc6d501b89816a107c9092fbb45a461350d39c
3.0.19
0.37 MBNot scanned—
76905a0af57384b9fb7e101c6cdc6d501b89816a107c9092fbb45a461350d39c
3.0.18
0.37 MBNot scanned—
76905a0af57384b9fb7e101c6cdc6d501b89816a107c9092fbb45a461350d39c
3.0.16
0.37 MBNot scanned—
76905a0af57384b9fb7e101c6cdc6d501b89816a107c9092fbb45a461350d39c
Showing 1 to 10 of 40 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from claycodes.org