Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Nyaa Preview

CRITICAL RISKRemoved from Chrome Web Store

Nyaa Preview

ID: kadbembfapnonleafkafhnencomefaba

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.1

Size

0.05 MB

Rating

3.0/5

Reviews

Users

7,064

Type

Extension

Updated

Sep 13, 2022

Publisher Contextual Analysis

Trusted

Author: http://nyaapreview.comView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

7,064

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Preview thumbnail images for nyaa.si website

👁‍🗨 Nyaa Preview is a Chrome extension that displays preview images over torrent list in nyaa.si site. Please follow this step to use our app. 1. Install Nyaa Preview Chrome extension 2. Visit https://nyaa.si 3. Hover mouse cursor over a post 4. You will see preview image of that title ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 👁‍🗨 Nyaa Preview は、nyaa.si サイトの torrent リストにプレビュー画像を表示する Chrome 拡張機能です。アプリを使用するには、この手順に従ってください。 1. Nyaa Preview Chrome 拡張機能をインストールする 2. https://nyaa.si にアクセス 3. 投稿にマウスカーソルを合わせる 4. そのタイトルのプレビュー画像が表示されます ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 👁‍🗨 Nyaa Preview는 nyaa.si 사이트의 토렌트 목록 위에 미리보기 이미지를 표시하는 Chrome 확장 프로그램입니다. 앱을 사용하려면 다음 단계를 따르세요. 1. Nyaa Preview Chrome 확장 프로그램 설치 2. https://nyaa.si 방문 3. 게시물 위로 마우스 커서를 가져갑니다. 4. 해당 타이틀의 미리보기 이미지가 표시됩니다. ➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 👁‍🗨 Nyaa Preview 是一个 Chrome 扩展程序，可在 nyaa.si 站点的 torrent 列表中显示预览图像。请按照此步骤使用我们的应用程序。 1. 安装 Nyaa Preview Chrome 扩展 2. 访问 https://nyaa.si 3. 将鼠标光标悬停在帖子上 4.您将看到该标题的预览图像

User Growth

Showing data from Aug 19, 2022 to Apr 14, 2023

Versions

+2.64%(+182 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 6 ratings

Average Rating

Current: 3.00 / 5.0+3.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High1

Medium2

Low1

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0 Code review	6

Extension Version	Code Review Findings
1.0	6

Files with findings

4 distinct paths — top paths by unique finding count:

background.js2
script/content-Nyaa.js2
script/content-Sukebei.js1
script/popup-Login.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	critical	script/popup-Login.js (line 92)	The extension stores the user's plaintext password in chrome.storage.local under the key 'password' immediately after login. Storing credentials in plaintext on disk is a serious security violation: any other extensio…	1.0
2	Credential Theft	critical	background.js (line 84)	The service worker reads the stored plaintext password from chrome.storage.local and silently transmits it (with email and sessionId) to nyaapreview.com on token refresh, without any user interaction. Combined with th…	1.0
3	Unauthorized Data Collection	high	script/content-Sukebei.js (line 354)	For every torrent title the user hovers over on sukebei.nyaa.si (an adult-content torrent index), the extension extracts a code from the title and ships it as a query parameter to a third-party endpoint at https://pmd…	1.0
4	Tracking	medium	script/content-Nyaa.js (line 260)	On every hover, the content script issues XHRs to arbitrary torrent-detail pages on nyaa.si and parses the returned HTML with DOMParser to scrape image URLs and submitter usernames. The extension auto-fetches pages th…	1.0
5	Tracking	medium	background.js (line 240)	On install the extension uses the cookies API to plant a long-lived 'Extension Installed' cookie on nyaapreview.com (~1.9 year expiration) and then reads it back to detect prior installs and disable the free trial. Th…	1.0
6	Other	low	script/content-Nyaa.js (line 13)	Immediately on injection into nyaa.si, the content script silently removes the 5th navigation item from the host site's navbar without any user-facing toggle or option. Modifying the host site's UI to delete navigatio…	1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


nyaapreview.com	/api/auth/login	https://nyaapreview.com/api/auth/login
nyaapreview.com	-	https://nyaapreview.com
cdnjs.cloudflare.com	/ajax/libs/milligram/1.4.1/milligram.css	https://cdnjs.cloudflare.com/ajax/libs/milligram/1.4.1/milligram.css
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
ns.adobe.com	/photoshop/1.0/	http://ns.adobe.com/photoshop/1.0/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceEvent	http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
ns.adobe.com	/xap/1.0/sType/ResourceRef	http://ns.adobe.com/xap/1.0/sType/ResourceRef#

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.0 out of 5 · 4 most recent reviews

Text reviews

Positive

Negative

You have to create an account and pay for it to work. It does NOT work without doing those two things. Just for a preview? Really?

Kay Eff·23 Dec 2022

it works!

yesmanhk·30 Nov 2022

doesn't do anything

a·17 Nov 2022

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Nyaa Preview

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating