Chrome Web StoreCaution required
Suspicious in code review (v0.5.0)
Our reviewer found behaviour consistent with malware in version 0.5.0, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
1046 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
My Weather, used by 10,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by remote code loading. It comes from a publisher with 2 extensions and was last updated in March 2023.
Key findings
- High
Remote Code Loading
The entire weather display widget is an iframe loading HTML from an AWS S3 bucket (`[domain withheld]`) that is unrelated to the publisher's declared domain and not listed in `host_permissions`. The S3 bucket owner can update these files at any time to serve arbitrary HTML and JavaScript — the iframe covers 96vw of the new tab page and constitutes a remotely-controlled rendering surface with no integrity protection. This is a well-known pattern for maintaining an apparently-benign extension in the CWS while delivering dynamic payloads after review.
Analyst notes
The extension loads its core weather widget by embedding iframes pointing to `[domain withheld] and `[domain withheld] (newtab.:) — an AWS S3 bucket unrelated to the publisher's declared domain ([domain withheld]) and outside the extension's declared host_permissions. This is a textbook remote-content-loading pattern: the displayed surface can be changed at any time by whoever controls that S3 bucket, and any served from it runs inside the newtab context. Combined with the publisher having a 100% malicious rate on all other tracked extensions, this pattern strongly suggests deliberate design to keep the extension 'clean' while serving externally-controlled payloads. The ML score (0.31) and chrome-stats score are both low, consistent with minified bundle output rather than obfuscated malware; the elevated suspicion comes from the architecture and publisher track record rather than code-level obfuscation.
My Weather Chrome extension security report
ID: bjplmidfgkjjemadmgdflcdipmmigbef
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- HBC Media Group
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
1046 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
The weather at your fingertips with 'My Weather'
Read the publisher’s full description
Stay up to date with the latest weather conditions in your area with this convenient Chrome extension. You can see the current temperature, and the forecast of the upcoming week for your location once you open a new Chrome tab or window. It's possible to switch between Celsius and Fahrenheit when looking at the weather by pressing the corresponding buttons. Whether you're planning your day or just want to be prepared for the elements, this extension has you covered. *Using a VPN will disrupt the extensions ability to see the user's location, and as a result it won't be able to provide the actual weather forecast. By clicking “Add to Chrome”, You accept and agree to installing the My Weather Chrome extension and setting Chrome New Tab to that provided by the service and the Terms of Use and Privacy Policy. New Tab Search will be powered by Microsoft Bing. Privacy Policy - https://hbcmediagroup.com/privacy-policy.php Terms of Service - https://hbcmediagroup.com/terms-of-service.php
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
1046 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from HBC Media Group
- My Weather7 users
Popular in News & Weather
- RSS Feed Reader500,000 users
- RSS Subscription Extension (by Google)400,000 users
- Yahoo Homepage400,000 users
- TickerIQ Crypto Price Ticker400,000 users
- Gismeteo200,000 users