Ntko office document control browser plug-in.

Ntko office document control browser plug-in.

ID: lppkeogbkjlmmbjenbogdndlgmpiddda

Supported Languages

🇨🇳Chinese (Simplified)
🇺🇸US English

Extension Info & Metadata

Status
Active
Version
1.8.3
Size
0.02 MB
Rating
1.0/5
Reviews
5
Users
900,000
Type
Extension
Updated
Jun 19, 2025
Category
Developer tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No

Publisher Contextual Analysis

Author
重庆软航科技有限公司View Profile
Country
CN
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
金开大道1249号 渝北区, 重庆市 400000 CN
Website
Visit
Total Extensions
7
Active
3
Obsolete
2
Listed
6
Unlisted
1
Total Users
932,063
Screenshot 1
Screenshot 2

The ability to use ntko office document controls on browsers.

NTKO OFFICE文档控件能够在chrome浏览器中使用webExtensions技术,启动一个本地的应用程序(Ntko浏览器),然后在本地的应用程序中能够直接编辑MS Office、WPS、金山电子表、永中Office等文档并保存到WEB服务器,实现文档和电子表格的统一管理。并具备痕迹保留、模板套红、二维码、pdf及tif阅读等办公自动化系统的必备功能。

Item
Type
Severity
Description
nativeMessaging
Permission
High
This permission enables communication with applications installed on your computer. Rated High because it can exchange data with native programs, potentially exposing system-level information and local files.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
http://*/
Permission
Unknown
No classification available for this permission.
https://*/
Permission
Unknown
No classification available for this permission.

The extension collects all cookies for the active tab and sends them as a string to the native messaging host via sendmessage(). This collection of authentication data is not declared in the Chrome Web Store's privacy disclosures (none declared). While the destination is a local companion app, the lack of disclosure is a compliance issue.

background/background.js (Line 172)
chrome.tabs.query({  currentWindow: true,  active: true}, function(tabs) {  let tab;  if (typeof varSessionURL !== 'undefined' && varSessionURL !== "" && varSessionURL !== null) {    let ntkoSessionURL = {};    ntkoSessionURL.url = varSessionURL;    tab = ntkoSessionURL;  } else {    tab = tabs.pop();  }  chrome.cookies.getAll({    url: tab.url  }, function(cookies) {    var varCookiesValue = "";    for (var i in cookies) {      if (0 != i)        varCookiesValue += "; ";      varCookiesValue += cookies[i].name;      varCookiesValue += "=";      varCookiesValue += cookies[i].value;    }    JsonObject["SessionURL"] = tab.url;    if (0 != varCookiesValue.length)      JsonObject["Cookie"] = varCookiesValue;    JsonObject["Referer"] = tab.url;    var jsonValue = JSON.stringify(JsonObject);    sendmessage(varGUID, varURLMd5, jsonValue);  });});

By severity

Critical0
High0
Medium1
Low0

Versions scanned

None of the 6 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path — top paths by unique finding count:

  • background/background.js1
S.No.
Category
Severity
File
Summary
Found in Version
1Unauthorized Data Collection
medium
background/background.js (line 172)The extension collects all cookies for the active tab and sends them as a string to the native messaging host via sendmessage(). This collection of authentication data is not declared in the Chrome Web Store's privacy…
URLs
4
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
www.ntko.com-http://www.ntko.com/
*-http://*/
*-https://*/

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found
Showing 1 to 6 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.