openrpa

ID: hpnihnhlcnfejboocnckgchjdofeaphe

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

1.0.0.6

Size

0.45 MB

Rating

5.0/5

Reviews

Users

6,000

Type

Extension

Updated

Oct 12, 2024

Publisher Contextual Analysis

Trusted

Author: openiap.ioView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

6,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Support extension for OpenRPA

OpenRPA is the first completely free, open source, enterprise grade Robotic Process Automation platform. This plugin is needed in order to automate chrome with OpenRPA, the addon does nothing without a running instance of OpenRPA running at the same time. The addon needs very broad permissions in order to record and replay sequences. This addon does not collect and send any information, you can how ever collect information from webpages using the OpenRPA software. For more info and free download visit out site, or forge us on github and help contribute.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

-14.29%(-1,000 users)

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 3 ratings

Average Rating

Current: 5.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High6

Medium1

Low0

Versions scanned

Showing 1 of 5 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0.5 Code review	8

Extension Version	Code Review Findings
1.0.0.5	8

Files with findings

3 distinct paths — top paths by unique finding count:

background.ts5
content.ts2
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	background.ts (line 388)	The background service worker accepts an arbitrary `script` string from the native-messaging port and executes it inside any tab via the Chrome DevTools Protocol (`chrome.debugger.attach` + `Runtime.evaluate`). This b…	1.0.0.5
2	Code Injection	high	background.ts (line 742)	Calls `eval(opt.code)` on a string supplied by the caller and passes the resulting function to `chrome.scripting.executeScript` with `allFrames: true`. The MV3 CSP normally forbids `eval` inside the service worker; th…	1.0.0.5
3	Code Injection	high	content.ts (line 521)	`updateelementvalue` decodes a base64 payload coming from the native host and writes it directly to a target element's `innerHTML`. Because the data path is native-host -> background -> content script with no sanitiza…	1.0.0.5
4	Privilege Escalation	high	background.ts (line 1132)	Thin wrapper around `Runtime.evaluate` that takes any expression string and runs it in the inspected tab's main world. Combined with the message handler at line 388, this is the primitive that turns native-host messag…	1.0.0.5
5	Privilege Escalation	high	background.ts (line 44)	Opens a persistent native-messaging channel to the local binary registered as `com.openrpa.msg` and auto-reconnects every second on disconnect. The remote end then drives tab navigation, tab/window enumeration, downlo…	1.0.0.5
6	Unauthorized Data Collection	high	manifest.json (line 20)	Injects `content.js` into every http, https, and file URL, in every frame, including `about:blank` subframes, at `document_start`. This maximally broad injection surface means the content script registers global mouse…	1.0.0.5
7	Unauthorized Data Collection	high	content.ts (line 173)	Capture-phase listeners for keydown, keypress, mousedown, click, and mousemove are attached to `document` on every site (only google.com/spreadsheets is skipped). Captured events are forwarded via `chrome.runtime.send…	1.0.0.5
8	Tracking	medium	background.ts (line 1040)	Continuous 1-second heartbeat plus listeners on `chrome.tabs.onCreated/onRemoved/onUpdated/onActivated`, `chrome.windows.onCreated/onRemoved/onFocusChanged`, and `chrome.downloads.onChanged` forward tab URLs, titles, …	1.0.0.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


support.mozilla.org	-	https://support.mozilla.org
chrome.google.com	-	https://chrome.google.com
docs.google.com	/spreadsheets/d	https://docs.google.com/spreadsheets/d
stackoverflow.com	/questions/59974414/chrome-tabs-query-returning-empty-tab-array	https://stackoverflow.com/questions/59974414/chrome-tabs-query-returning-empty-tab-array
blog.bitsrc.io	/what-is-chrome-scripting-api-f8dbdb6e3987	https://blog.bitsrc.io/what-is-chrome-scripting-api-f8dbdb6e3987
docs.microsoft.com	/en-us/dotnet/framework/winforms/controls/how-to-size-a-windows-forms-label-control-to-fit-its-contents	https://docs.microsoft.com/en-us/dotnet/framework/winforms/controls/how-to-size-a-windows-forms-label-control-to-fit-its-contents
en.wikipedia.org	/wiki/Base64	https://en.wikipedia.org/wiki/Base64#URL_applications
github.com	/beatgammit/base64-js/issues/42	https://github.com/beatgammit/base64-js/issues/42
feross.org	-	https://feross.org
bugzilla.mozilla.org	/show_bug.cgi	https://bugzilla.mozilla.org/show_bug.cgi?id=695438

Showing 1 to 10 of 40 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


13.3.3.7	IPv4	-
1.0.0.6	IPv4	-

5.0 out of 5 · 3 most recent reviews

Text reviews

Positive

Negative

brilliant and make me feel immortal!

Cathy Qin·10 Sept 2024

Best thing in the RPA world!

Gian Hernandez·21 Dec 2022

This is freaking opensource and totally awesome! Watch the YouTube videos Anders Jensen and Allan Zimmermann (the creator of this awesomeness) for training. If anyone gives this less than 5 Stars it is only because they have no idea what it and how amazing it is. Thanks for making this open source and may all big businesses sign up for the support. Thankyou again from a small business that needed this so much. What a blessing!

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

openrpa

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 5 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating