Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Netflix Party

CRITICAL RISKRemoved from Chrome Web Store

Netflix Party

ID: djpbcgbfllffgmoedmonmjbaofikcnnc

Could be malicious

Supported Languages

🇪🇹Amharic

🇸🇦Arabic

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇱Hebrew

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇮🇳Kannada

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇮🇷Persian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇰🇪Swahili

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.0.14

Size

1.45 MB

Rating

4.7/5

Reviews

Users

100,000

Type

Extension

Updated

Apr 20, 2024

Publisher Contextual Analysis

Author: https://netflixpartys.comView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

100,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Install Netflix Party Chrome extension to watch Netflix in sync with your friends

Netflix Party is an amazing extension to sync & watch videos including TV Shows and Movies on Netflix.com. INSTALLATION INSTRUCTIONS OF NETFLIX PARTY: 1. Click on “Add to Chrome” button. 2. Then, click on “Add Extension” button prompted on screen. 3. Click on “Puzzle” icon on right hand side of Chrome bar. 4. Pin the extension as it should be blue pin in front of the extension name “Netflix Party”. 5. Play the video on netflix.com and then click on extension icon to Create a Party. 6. Share the URL with your friend to join the party. How to Join the Netflix Watch Party? Open the shared link and make sure to ask your friend to install the extension on his/her device. ————————————— You can sync and do group chat while enjoys shows on Netflix website. Host or Join Watch Parties in order to watch Netflix videos together. Send Emojis. Enjoy Netflix Watch Party! Disclaimer: Netflix Party is in no way affiliated with Netflix, Inc. Disclosure/Consent: By using Netflix Party, you accept our Terms of Use and Privacy Policy. This extension is designed to maintain high-quality service and manage server costs effectively. As part of our efforts to sustain our operations, we may earn affiliate commissions on purchases via our extension. Thank you for choosing Netflix Party. We are committed to continually improving your online experience. Version 1.0.14: - Minor Improvements. Version 1.0.13: - Minor Improvements. Version 1.0.12: - Minor Improvements. Version 1.0.11: - Improvements. Version 1.0.10: - Improvements. Version 1.0.9: - Improvements. Version 1.0.8: - Bug Fixes And improvement. Version 1.0.7: - Minor Bug Fixes. Version 1.0.6: - Minor Fixes. Version 1.0.5: - Bug Fixes and Improvement. Version 1.0.4: - Code Changes. Version 1.0.3: - Minor Bug Fixes. Version 1.0.2: - Bug Fixes and Improvement. Version 1.0.1: - Added Multiple Languages. - Minor Bug Fixes and Improvements. Version 1.0.0 : - New Release.

User Growth

Showing data from May 01, 2022 to May 03, 2023

Versions

-16.5%(-19,759 users)

Compared to 3 months ago

7 versions released in this period

Rating Count

Total: 18 ratings

Average Rating

Current: 4.33 / 5.0+4.33

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High4

Medium0

Low0

Versions scanned

Showing 1 of 15 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.7 Code review	7

Extension Version	Code Review Findings
1.0.7	7

Files with findings

3 distinct paths — top paths by unique finding count:

background.js4
content/contentScript.js2
netflixParty.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Other	critical	background.js (line 108)	Silent click fraud / affiliate cookie stuffing: the background opens pinned, inactive (hidden) tabs to attacker-chosen URLs, tells the content script to auto-click a target selector in the landing page, then auto-remo…	1.0.7
2	Other	critical	content/contentScript.js (line 17)	On every http/https page the content script pulls the remote `script` config and checks the current hostname against server-provided lists (`skimFirst`, `skimSecond`, `AIPStores`). When matched, it wraps the current U…	1.0.7
3	Remote Code Loading	critical	background.js (line 22)	Two-stage remote code/config loader: the extension POSTs its ID/version/timezone to netflixpartys.com, receives a secondary URL, fetches JSON from that URL, and persists the returned `code` object as `script` in chrom…	1.0.7
4	Phishing	high	content/contentScript.js (line 74)	The content script accepts `click` messages containing server-supplied CSS selectors and auto-invokes `.click()` on matching DOM nodes, or replaces the top-level location with `r.homeAff` — letting the remote config f…	1.0.7
5	Privilege Escalation	high	background.js (line 147)	The background exposes `secure` and `protect` message handlers that redirect the active tab to an arbitrary URL (`chrome.tabs.update({url:e.path})`) and instruct the content script to inject an iframe with a remote-co…	1.0.7
6	Privilege Escalation	high	netflixParty.js (line 1)	This script, injected at document_start on netflixpartys.com, listens for `PassToBackground` custom DOM events and relays them verbatim into `chrome.runtime.sendMessage`. Combined with the background's `openTab`/`secu…	1.0.7
7	Tracking	high	background.js (line 67)	The remote-config fetch is wired to fire on every install, startup, window creation, and tab creation (gated by a 24-hour clock stored in chrome.storage), ensuring the attacker's server can refresh the affiliate/click…	1.0.7

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/main/LICENSE	https://github.com/twbs/bootstrap/blob/main/LICENSE
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
popper.js.org	-	https://popper.js.org
github.com	/twbs/bootstrap/graphs/contributors	https://github.com/twbs/bootstrap/graphs/contributors
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceRef	http://ns.adobe.com/xap/1.0/sType/ResourceRef#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/

Showing 1 to 10 of 40 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


14.44.29.84	IPv4	-
6.55.93.93	IPv4	-

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Great works

viren chaudhary·2 May 2024

nice extension

Aanchal Tez Tarrar·30 Apr 2024

Great Extension, and the best its user-friendly and that to free to access. :)

Richa Dhawan·30 Apr 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Netflix Party

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 15 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating