Chrome Web StoreNo malware found
In code review
Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.
1 indicator
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Paint Tool for Chrome, used by 70,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in August 2026.
Analyst notes
This is a self-contained canvas annotation tool with zero network sinks: the only URLs anywhere in the bundle are the Google CRX update endpoint in and `[domain withheld] + [domain withheld] + ` ` opened from the user-clicked rating dialog in:944, and there is no fetch, XMLHttpRequest, WebSocket, sendBeacon, eval, new Function, importScripts or onMessageExternal in any first-party file. The only unattended code is (content script, document_start, all_frames), and it is genuine jQuery 3.2.1 re-minified by webpack — its `var v="3.2.1"` version token, UMD wrapper and LICENSE banner are intact, it contains no `chrome.*`/`browser.runtime` reference, no URL, and its only 2 XMLHttpRequest and 2 fromCharCode hits are jQuery's own $.ajax transport and selector code. The internal note attributing this to the [domain withheld] WhatsApp spamware cluster does not match this codebase: `grep -ril 'whatsapp|[domain withheld]|WAPI'` over the whole bundle returns nothing, and no code targets any specific site. Corroborating the benign read: bundled and published manifests match exactly, chrome-stats likelihood is, publisher email is VALID with Google trusted-publisher and featured badges. Contradicting signals (ML 0.91, risk-engine Critical 4.30, 6% malware in the 8,692-member permhash cluster) all derive from the same broad-host + scripting manifest shape, which is the minimum an inject-canvas-on-any-page paint tool needs, not evidence of behaviour. Two real hygiene defects belong here rather than in findings: persistLocalStorage calls `t.localStorage.clear()` on a quota error, wiping the *host site's* entire localStorage (a plausible cause of the reviewers' "loss of form entries"), and incrementCounter pops a dismissible own-listing rating dialog on every 7th draw click, matching the "forced to rate" complaints — spammy and destructive-by-sloppiness, but neither exfiltrates nor injects third-party content. Note (referenced at:63) and (:6) were not present in the bundle, so the model's hits are unverified.
Paint Tool for Chrome Chrome extension security report
ID: coabfkgengacobjpmdlmmihhhfnhbjdm
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Paint Online App.
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.
Data Exfiltration
Code review completed; no malicious patterns detected for this category.
Unauthorized Data Collection
Code review completed; no malicious patterns detected for this category.
Network Interception
Code review completed; no malicious patterns detected for this category.
Code Injection
Code review completed; no malicious patterns detected for this category.
Credential Theft
Code review completed; no malicious patterns detected for this category.
Obfuscation
Code review completed; no malicious patterns detected for this category.
Tracking
Code review completed; no malicious patterns detected for this category.
Privilege Escalation
Code review completed; no malicious patterns detected for this category.
Phishing
Code review completed; no malicious patterns detected for this category.
Remote Code Loading
Code review completed; no malicious patterns detected for this category.
Other
Code review completed; no malicious patterns detected for this category.
1 indicator
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Paint tool to draw anything and anywhere in real-time, paint online. Take a screenshot of your drawing use screenshot tool.
Read the publisher’s full description
Paint Tool - draw on any website, add text, add lines, and highlight! With Web Paint, you can use your mouse or touchscreen to draw on the web or on PDF and save it to your computer. Paint, draw, and mark on any webpage or website. Whether you're a student, a professional, or just someone who loves browsing the web is a must-have extension. You'll have access to an array of advanced annotation tools, including a pencil, highlighter, color picker, arrow, polygon, text, emoji, and more. Easy to set up extension: 1. Install the Web Paint extension, and reload the page to let the extension work. 2. Click on the extension whenever you need to draw or highlight something. 3. Drawings are automatically saved. 4. Take Screenshot. 5. Reload the page to exit the draw mode from the browser. Accustomed to reading books and highlighting important texts or just wanted to draw on any website in real time in the comfort of your browser or want to share your screen for cases like reporting technical issues, making product demos or how-to tutorials? Here are reasons to choose our extension: 1. Has all the features of MS Paint. 2. Adjustable thickness, transparency, and preset color. 3. Take a screenshot of the page. Paint Online is lite weight and a free extension for Chrome that can be used for educational purposes and introduce anyone to drawing right from your browser. In addition, it can practice the alphabet, numbers, and paintings while educating. The creation of a screen capture is easy as it ever could be. Choose from the full-screen or partial area and take it in a click. Then you can fully customize screenshot like add text, drawing lines, arrows, and shapes. You can share your images on Pinterest board. It also contains the functions you need: - Hot-keys to each tool - Save drawing with a screenshot option - Save image to your PC or Print - Crop the necessary area of an image and save it Important Notice After installation/update, please reload the active tabs in your browser for the extensio to work. Rate us! We work hard to provide you with the best experience for Chrome. If you like our extension, please provide us with a 5 star rating!
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
1 indicator
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in Workflow & Planning
- Adobe Acrobat: PDF edit, convert, sign tools346,000,000 users
- Application Launcher For Drive (by Google)99,000,000 users
- AdBlock — block ads across the web65,000,000 users
- Chrome Remote Desktop41,000,000 users
- Adblock Plus - free ad blocker40,000,000 users