Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: nbundle - App Store for Notion

CRITICAL RISKRemoved from Chrome Web Store

nbundle - App Store for Notion

ID: ijbhmpleignhmhbgmddlpmhclekghocp

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.0.109

Size

0.64 MB

Rating

4.7/5

Reviews

Users

6,485

Type

Extension

Updated

Sep 17, 2022

Publisher Contextual Analysis

Trusted

Author: http://nbundle.comView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

12,555

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

App Store for Notion. All apps live inside your Notion. You don't have to open another app or browser tab to use them. Just Notion.

Bring functionalities of other apps into your Notion workspaces. Tasks, which you need to go to other apps to get done before, now can be done directly in Notion. All apps live and work where you use Notion, including the Notion Mac App, the Notion Windows App, or the Notion Web App on Chrome, Microsoft Edge, Brave, & Firefox. No need to go back & forth between Notion and other apps anymore. ✨ Features for users: - 1-click discover performant, high-quality, & Notion-like apps. - 1-click manage, install, uninstall, enable, & disable apps. - Ensure apps are fast, performant, & have no conflict. - All apps are well-integrated with Notion. - All features & apps live and work in your Notion, both in the browsers and the Notion desktop apps. ⚒️ Features for developers: - Work as the app platform & infrastructure to build & deploy performant, high-quality, & Notion-like apps. - Come with the developer SDK that makes it ridiculously easy to build & deploy new Notion apps. - Apps built with nbundle work cross-platform automatically, both in the browsers & in the Notion desktop apps. - Auto-update, error handling, conflict handling, UI & API compatibility with Notion, and other low-level functionalities are automatically handled by nbundle. 🔒 Terms & privacy By using the product, you agree to our Terms of Service (https://nbundle.com/terms) and Privacy Policy (https://nbundle.com/privacy).

User Growth

Showing data from Jul 18, 2022 to Mar 05, 2023

Versions

+77.19%(+2,825 users)

Compared to 3 months ago

11 versions released in this period

Rating Count

Total: 7 ratings+1 (17%)

Average Rating

Current: 4.71 / 5.0+4.71

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium2

Low0

Versions scanned

Showing 1 of 11 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.82 Code review	5

Extension Version	Code Review Findings
1.0.82	5

Files with findings

1 distinct path — top paths by unique finding count:

scripts/worker.js5

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	high	scripts/worker.js (line 407)	The service worker reads Notion's authentication session cookie (`token_v2`) via the `chrome.cookies` API and persists it to `chrome.storage.local` under key `auth:token`. While exposed only to senders whose origin eq…	1.0.82
2	Data Exfiltration	high	scripts/worker.js (line 304)	The handler obtains a per-user `idToken` from the Notion-side content script and forwards it as a `Bearer` Authorization header to the third-party server `https://www.nbundle.com`. Bridging Notion-derived user identit…	1.0.82
3	Privilege Escalation	high	scripts/worker.js (line 427)	The Notion content script can invoke `bridgeExternalMessage`, which then dispatches into the full external-message handler set (the same handlers used by `chrome.runtime.onMessageExternal`, including `getToken`-equiva…	1.0.82
4	Unauthorized Data Collection	medium	scripts/worker.js (line 461)	Using the `management` permission, the worker subscribes to `chrome.management.onInstalled` and broadcasts the full metadata of every newly installed browser extension (id, name, version, description, homepage URL) to…	1.0.82
5	Unauthorized Data Collection	medium	scripts/worker.js (line 225)	Exposes `chrome.management.get` to the Notion-origin caller, allowing the page (or any nbundle 'app' running through the bridge) to query metadata about arbitrary installed extensions by ID. Combined with the install/…	1.0.82

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


chrome.google.com	/webstore/detail/$%7Ba%7D%60;case	https://chrome.google.com/webstore/detail/${a}`;case
microsoftedge.microsoft.com	/addons/detail/$%7Ba%7D%60;case	https://microsoftedge.microsoft.com/addons/detail/${a}`;case
addons.mozilla.org	/addon/$%7Ba%7D%60%7D%7Dfunction	https://addons.mozilla.org/addon/${a}`}}function
www.nbundle.com	-	https://www.nbundle.com
developers.nbundle.com	-	https://developers.nbundle.com
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.notion.so	-	https://www.notion.so/
chrome.google.com	/webstore/*	https://chrome.google.com/webstore/*
www.notion.so	/*	https://www.notion.so/*

Showing 1 to 10 of 40 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


25.12.1.13	IPv4	-
1.8.14.95	IPv4	-
1.77.41.82	IPv4	-
1.5.6.68	IPv4	-
1.21.78.54	IPv4	-
1.64.9.86	IPv4	-
1.77.56.92	IPv4	-
1.77.74.82	IPv4	-
1.42.1.72	IPv4	-
1.4.35.68	IPv4	-
1.32.57.63	IPv4	-
2.7.49.94	IPv4	-
1.32.42.18	IPv4	-
181.54.78.241	IPv4	-
1.202.33.33	IPv4	-
124.163.26.227	IPv4	-
124.164.26.228	IPv4	-
206.111.44.111	IPv4	-
2.25.5.5	IPv4	-
1.75.5.5	IPv4	-
2.152.242.63	IPv4	-
91.95.28.22	IPv4	-
1.158.108.37	IPv4	-
119.103.242.138	IPv4	-
138.112.25.25	IPv4	-
115.118.113.113	IPv4	-
2.182.5.5	IPv4	-
18.117.35.26	IPv4	-
6.84.58.58	IPv4	-
9.9.5.5	IPv4	-
22.18.4.4	IPv4	-
137.11.25.248	IPv4	-
2.5.5.5	IPv4	-
12.144.193.32	IPv4	-
1.5.75.75	IPv4	-
108.11.176.202	IPv4	-
149.185.156.45	IPv4	-
1.23.82.72	IPv4	-
2.2.82.64	IPv4	-
2.12.51.56	IPv4	-
3.95.29.25	IPv4	-
21.15.46.55	IPv4	-
9.11.33.172	IPv4	-
2.11.164.175	IPv4	-
45.3.57.65	IPv4	-
18.149.5.149	IPv4	-
18.101.5.101	IPv4	-
1.92.96.96	IPv4	-
4.31.203.196	IPv4	-
12.115.243.183	IPv4	-
1.46.45.45	IPv4	-
1.133.191.214	IPv4	-
14.14.225.194	IPv4	-
183.125.27.187	IPv4	-
113.104.233.207	IPv4	-
2.42.56.203	IPv4	-
205.132.48.108	IPv4	-
2.164.205.148	IPv4	-
206.132.48.108	IPv4	-

Showing 1 to 59 of 60 rows

Rows per page:

4.7 out of 5 · 7 most recent reviews

Text reviews

Positive

Negative

Worked for me in no time flat. Managing packages is a good idea. Like others have said, make sure you have this and the notion extension you want enabled. Go to Notion and open the "square waffle" next to the share button (make sure you don't have a page open on the sidebar) and find your extension. If you are using Notion themes, make sure you set your theme to "system default" first so your desired theme isn't overridden.

Sal Carrera·28 Feb 2023

No idea how this works, the icon doesn't show on the extension bar. Trying to figure it out by going to the nbundle website... Directions pls? I'm using Yandex browser

josh wanner·24 Dec 2022

Awesome idea!

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

nbundle - App Store for Notion

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 11 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating