Security Alert: Confirmed Malware
OpenLoop.SO Sentry Node Extension
ID: effapmdildnpkiaeghlkicpfflpiambm
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Privacy
- Privacy Policy
- MX records exist
- No
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- No
Contribute to the OpenLoop, earning while bolstering the decentralized infrastructure for large-scale data collection.
OpenLoop Sentry Node Extension is your gateway to actively participate in the revolutionary OpenLoop Network. By leveraging the power of decentralized infrastructure, this extension empowers users to optimize their internet bandwidth, contribute to AI development, and earn rewards seamlessly. *** What is OpenLoop Network? OpenLoop Network is a decentralized wireless network designed to enhance the delivery of internet services while empowering users. Built on cutting-edge technology, OpenLoop combines innovative protocols, decentralized systems, and user participation to create a robust framework for the future of internet connectivity and AI infrastructure. The network operates on a foundation of trustless mechanisms, such as proof of backhaul, location, and frequency, ensuring data security, transparency, and reliability. By decentralizing internet bandwidth, OpenLoop builds a scalable infrastructure tailored to meet the data needs of leading AI companies. *** How Does the Sentry Node Extension Work? The OpenLoop.Network Sentry Node Extension allows users to connect their devices to the OpenLoop ecosystem. Once installed, property owners and residents can share unused internet bandwidth with the network, contributing to its growth and receiving rewards in return. This user-friendly extension operates in the background, ensuring a seamless and secure experience without compromising your internet quality or personal data. *** Key Features of OpenLoop.Network Sentry Node Extension - Enhanced Internet Service Delivery: Sync3 Network, the foundation of OpenLoop, enhances internet performance by creating a decentralized wireless infrastructure. This allows users to improve their connectivity while contributing to the network. - Earn Rewards Effortlessly: Through OpenLoop's innovative protocol and hardware, users can monetize their unused internet bandwidth. Property owners and residents alike can share bandwidth with the network to earn rewards, transforming internet usage into a source of income. - Decentralized Security & Trust: OpenLoop Network leverages decentralized frameworks, including proof of backhaul, location, and frequency. These mechanisms ensure a secure, trustless system that protects user contributions while fostering transparency and reliability. - Empowering AI Development: OpenLoop builds the backbone for AI infrastructure, offering a robust, decentralized system that supports the vast data requirements of major AI partners. By contributing to the network, users play a pivotal role in shaping the future of artificial intelligence. *** Why Choose OpenLoop.Network Sentry Node Extension? - User-Friendly Design: Install the extension in just a few clicks and let it handle the rest. Easily monitor your rewards and customize preferences for a personalized experience. - Transparent & Secure: OpenLoop ensures that your personal data remains private. The system only utilizes unused bandwidth and operates transparently, prioritizing user trust. - Community-Centric: Join a growing network of contributors helping to build a decentralized, future-proof internet ecosystem while earning rewards for their participation. - Join the OpenLoop Revolution The OpenLoop.Network Sentry Node Extension isn't just an extension—it’s a movement towards a decentralized future. Be a part of the transformation where internet connectivity, security, and AI innovation converge. Install the extension today and start earning rewards as you help shape the future of decentralized networks and artificial intelligence. Download now and unlock the potential of your internet bandwidth. It’s time to earn, contribute, and connect like never before.
The background service worker periodically sends an authenticated POST request to `https://api.openloop.so/bandwidth/share` using a bearer token pulled from extension storage. This creates a persistent outbound telemetry channel that runs without user interaction, which is suspicious for silent data sharing or server-controlled tasking in an extension with minimal declared permissions.
const zt = ut(qe.ACCESS_TOKEN, "");ut(qe.IS_VISITED_WELCOME_PAGE, ""), ut(qe.FAKE_STORAGE, "");function vs(e, t) { return Math.floor(Math.random() * (t - e + 1)) + e}const ys = vs(60, 80);async function _s() { try { fetch("https://api.openloop.so/bandwidth/share", { method: "POST", body: JSON.stringify({ quality: ys }), headers: { "Content-Type": "application/json", Authorization: `Bearer ${zt.value}` } }) } catch {}}setInterval(() => { zt.value && _s()}, hr), De.runtime.onInstalled.addListener(() => { console.log("Extension installed")});The service worker tracks tab switches, reads the previous tab's metadata, and forwards the previous page title to a content-script messaging channel. Collecting navigation context and page titles is unrelated to the stated bandwidth-sharing purpose and is a tracking pattern that could be repurposed for browsing-history surveillance.
let ve = 0;De.tabs.onActivated.addListener(async ({tabId: e}) => {if (!ve) { ve = e; return}let t;try { t = await De.tabs.get(ve), ve = e} catch { return}console.log("previous tab", t), Ar("tab-prev", { title: t.title}, { context: "content-script", tabId: e})}), pr("get-current-tab", async () => {try { const e = await De.tabs.get(ve); return { title: e == null ? void 0 : e.title }} catch { return { title: void 0 }}})})();The popup centralizes all API calls through a helper that automatically attaches the stored bearer token to every request to the remote OpenLoop API. This is not malicious by itself, but combined with the background heartbeat it shows the extension is designed around continuous authenticated communication with an external service.
async function ne(e, t = {}) { try { const o = `https://api.openloop.so${e}`, s = { ...t, headers: { ...t.headers, Authorization: `Bearer ${Ve.value}` } }; return await (await fetch(o, s)) .json() } catch (n) { console.error(`fetch error: ${n}`) }}const he = cn("auth", () => {By severity
Versions scanned
Showing 2 of 10 scanned versions with more than one unique finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| 0.0.3 | 3 |
| 0.0.2 | 6 |
Files with findings
4 distinct paths — top paths by unique finding count:
- dist/assets/popup-DcSPjCQf.js5
- dist/background/index.mjs2
- dist/assets/popup-BCWzmMNw.js1
- manifest.json1
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Code Diff
Compare extension code between any two versions.
No comparable text files found between these versions.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.