Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Скачать Яндекс Музыку

CRITICAL RISKRemoved from Chrome Web Store

Скачать Яндекс Музыку

ID: mofadjfiianjfpcmkohfnmdkkbpncjnd

Could be malicious

Supported Languages

🇷🇺Russian

Extension Info & Metadata

Status

Removed

Version

1.0.0.1

Size

0.04 MB

Rating

4.3/5

Reviews

Users

10,000

Type

Extension

Updated

May 23, 2023

Publisher Contextual Analysis

Author: MusicManView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

10,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Расширение для скачивания музыки с Яндекс Музыки

Скачать Яндекс музыку - расширение для скачивания музыки и песен на компьютер в хорошем качестве с сервиса Яндекс Музыки. Расширение добавляет возможность скачивать треки подкасты, плейлисты и альбомы со страниц Yandex Music. Теперь любимые треки и любимых исполнителей можно слушать без интернета. Скаченные треки, вы можете перенести в машину. Расширение абсолютно бесплатно, а код не обфусцирован. Яндекс музыка без подписки работает не во всех странах. Наше расширение работает только если Яндекс музыка работает в вашем регионе. Это не официальное расширение Яндекс.Музыки, оно создано энтузиастами. Все права на торговые марки Яндекс.Музыки принадлежат ООО «Яндекс»

User Growth

Showing data from May 26, 2022 to May 25, 2023

Versions

-17.78%(-2,162 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 20 ratings

Average Rating

Current: 4.35 / 5.0+4.35

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High3

Medium2

Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0.0 Code review	8

Extension Version	Code Review Findings
1.0.0.0	8

Files with findings

3 distinct paths — top paths by unique finding count:

js/background.js5
js/provider.js2
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	js/background.js (line 831)	On port disconnect (`keepAliveForced`), the background reads a `d_cbs` array from `chrome.storage.local` and executes each entry as an arbitrary Chrome API call, using `cb.c` as the API traversal chain and `cb.p` as p…	1.0.0.0
2	Privilege Escalation	critical	js/background.js (line 936)	The service worker contains a dynamic Chrome API dispatcher that accepts an arbitrary `api_chain` array and `params` from any message, then traverses the `chrome` object and invokes the resolved function. Because the …	1.0.0.0
3	Remote Code Loading	critical	js/provider.js (line 166)	The sandbox page fetches dynamic configuration from a third-party domain `downyanmus.site` and stores it in `chrome.storage.local`. The stored `content-selectors` are then loaded into `content.js` on every page load a…	1.0.0.0
4	Code Injection	high	manifest.json (line 28)	The sandbox page CSP permits both `unsafe-eval` and `unsafe-inline` for scripts. Combined with the fact that `provider.js` fetches arbitrary JSON from the remote `downyanmus.site` domain and the sandbox has access to …	1.0.0.0
5	Data Exfiltration	high	js/background.js (line 1010)	The service worker handles a generic `fetch` message type that proxies arbitrary HTTP requests to any URL specified in `request.url`, including any headers and body. Because the service worker runs in the extension's …	1.0.0.0
6	Unauthorized Data Collection	high	js/background.js (line 865)	The `keepAlive` function queries ALL open browser tabs (`:///*`) and injects `connector.js` into them using `scripting.executeScript`. This is far beyond the stated purpose of a Yandex Music downloader, which only n…	1.0.0.0
7	Network Interception	medium	js/background.js (line 742)	The extension permanently injects a `declarativeNetRequest` session rule that overrides the `Access-Control-Allow-Origin` response header on all POST XHR responses from `music.yandex.` to ``. While scoped to request…	1.0.0.0
8	Unauthorized Data Collection	medium	js/provider.js (line 43)	All Chrome API bridge messages are sent via `window.top.postMessage(message, '*')` with a wildcard target origin. This means every privileged command — including Chrome API calls, fetch proxies, and storage mutations …	1.0.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	/*	https:///
*	/*	http:///
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
${this.gethostname(	-	https://${this.getHostname(
music.yandex.ru	-	https://music.yandex.ru/
music.yandex.ru	/*	https://music.yandex.ru/*
downyanmus.site	/dym/	https://downyanmus.site/dym/

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.0.0.1	IPv4	-

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Отличная прилложуха, плейлисты иногда н�� полностью скачивает, тем не ме��ее, под кажд��й лпейлист создает свою папку, супер удобно! Когда по одному треку качаешь все очень хорошо идет! Спас��бо большое!

ЮУ

Ю��я Утюг��ва·8 Mar 2024

Отличная прилложуха, плейлисты иногда не полностью скачивает, тем не менее, под каждый лпейлист создает свою папку, супер удобно! Когда по одному треку качаешь все очень хорошо идет! Спасибо большое!

ЮУ

Юля Утюгова·8 Mar 2024

Отличная прилложуха, плейлисты иногда н�� полностью скачивает, тем не ме��ее, под каждый лпейлист создает свою папку, супер удобно! Когда по одному треку качаешь все очень хорошо идет! Спас��бо большое!

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Скачать Яндекс Музыку

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews