Extension Auditor
Extension Auditor
Sign Up

Panic Button

ID: fmhjaclcionofabidbnpfnaheafpchoc

Could be malicious

Supported Languages

🇧🇩Bengali
🇧🇷Brazilian Portuguese
🇬🇧British English
🇧🇬Bulgarian
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇭🇷Croatian
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇪🇪Estonian
🇵🇭Filipino
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇬🇷Greek
🇮🇳Gujarati
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇱🇻Latvian
🇱🇹Lithuanian
🇲🇾Malay
🇮🇳Malayalam
🇮🇳Marathi
🇳🇴Norwegian
🇵🇱Polish
🇵🇹Portuguese
🇷🇴Romanian
🇷🇺Russian
🇷🇸Serbian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇸🇪Swedish
🇮🇳Tamil
🇮🇳Telugu
🇹🇭Thai
🇹🇷Turkish
🇺🇸US English
🇻🇳Vietnamese

Extension Info & Metadata

Status
Removed
Version
0.1.2
Size
0.13 MB
Rating
3.2/5
Reviews
10
Users
113,357
Type
Extension
Updated
Jul 20, 2021
Category
7_productivity
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Author
Walter SchinnerView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
113,357

Hide all tabs instantly by pressing Alt-Z keyboard shortcut or by clicking a toolbar button

Panic Button is a simple extension that allows you to hide ALL THE TABS: - By clicking the toolbar button (Pin it to the toolbar in advance) - Alt-Z keyboard shortcut Use chrome://extensions/shortcuts to change a shortcut

Item
Type
Severity
Description
<all_urls>
Permission
Critical
This permission grants access to all websites without restriction. Rated High because it can access any web content, monitor all web activity, and potentially steal sensitive data across all sites.
sessions
Permission
High
This permission accesses recently closed tabs and windows. Rated High because it can monitor user activity, recover closed sensitive pages, and track browsing patterns.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2

Google Analytics is loaded dynamically from google-analytics.com in the background page and fires a pageview hit each time the background script starts. This sends the GA tracking ID (UA-189787335-1) and the user's IP to Google. While the CSP explicitly whitelists this origin and GA is not malware, injecting remote analytics into a background page is a privacy concern and violates Chrome Web Store policy requiring disclosure of data collection. It is not evidence of malice, but it is a hygiene finding.

lib/background.js (Line 1)
window.ga = window.ga || function() {    (ga.q = ga.q || [])    .push(arguments)  }, ga.l = +new Date, ga("create", "UA-189787335-1", "auto"), ga("set", "checkProtocolTask", null), ga("send", {    hitType: "pageview",    page: "/background"  }),  function() {    const e = document.createElement("script");    e.type = "text/javascript", e.async = !0, e.src = "https://www.google-analytics.com/analytics.js";    const t = document.getElementsByTagName("script")[0];    t.parentNode.insertBefore(e, t)  }();

By severity

Critical0
High0
Medium0
Low1

Versions scanned

None of the 2 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path — top paths by unique finding count:

  • lib/background.js1
S.No.
Category
Severity
File
Summary
Found in Version
1Tracking
low
lib/background.js (line 1)Google Analytics is loaded dynamically from google-analytics.com in the background page and fires a pageview hit each time the background script starts. This sends the GA tracking ID (UA-189787335-1) and the user's IP…
0.1.2
URLs
3
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
www.google-analytics.com/analytics.jshttps://www.google-analytics.com/analytics.js
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
www.google-analytics.com;-https://www.google-analytics.com;

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
0.1.2
Latest
0.12 MB
Malicious
1
9c9c88eb7d5ba054e5a1107129aaf65cd3e314a6884499215a4ee05e093379e7
0.1.3
0.13 MB
Malicious
—
9c9c88eb7d5ba054e5a1107129aaf65cd3e314a6884499215a4ee05e093379e7
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In