Security Warning: Historically Flagged as Malware

This extension is historically labeled as malware, but the current version analysis does not yet confirm severe malicious findings.Extension: ParrotTalks抄筆記

HIGH RISKStill available - needs review

ParrotTalks抄筆記

ID: kkodiihpgodmdankclfibbiphjkfdenh

Supported Languages

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

Extension Info & Metadata

Status

Active

Version

1.16.7

Size

1.93 MB

Rating

4.4/5

Reviews

336

Users

30,000

Type

Extension

Updated

Jul 1, 2026

Publisher Contextual Analysis

Trusted

Author: https://parrottalks.com/View Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

30,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

一點即查，無需複製、貼上、另闢查詢網頁 - 給你更流暢的閱讀體驗。

----- 與抄筆記有關的重要小事 ❤ ----- ➤ 經實際測試，查一個單字快 400 倍 ➤ 有效促進大量閱讀(歡迎自行嘗試) ➤ 也支援看 PDF 檔案 - 網友們叫它：論文神器 ----- 為什麼抄筆記? ----- 單字連同文本原句作成專屬你的筆記然後用腦科學記憶法複習這是一套不可分開的流程帶你走向抄筆記美好未來因為單字默默記住就再也不用查了 ----- 預設快速鍵 ----- e ─ 啟用「抄筆記」/ 快速查詢選取範圍 r ─ 單字發音 R ─ 句子發音 z ─ 啟用/關閉功能：「斷開超連結功能」 q ─ 切換「抄筆記」視窗大小 esc ─ 關閉「抄筆記」 w ─ 「抄筆記」視窗上移 s ─ 「抄筆記」視窗下移 a ─ 「抄筆記」視窗左移 d ─ 「抄筆記」視窗右移 ----- 版本記錄 ----- 1.16.6 - 後台程式最佳化 1.16.5 - 重新上架 - 查詢介面邊緣顯示微調 1.16.1 - 修正無法啟動的錯誤 (Manifest v3 相關) 1.16.0 - 更新支援 Manifest v3 1.15.3 - 改進翻譯流暢度 1.15.2 - 修正部分UI顯示 1.15.1 - 修正 Chrome 76 後在 Windows 下 PDF 無法開啟 - 修正部分UI顯示 1.15.0 - 查詢速度增強

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 333 ratings

Average Rating

Current: 4.41 / 5.0-0.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High3

Medium3

Low0

Versions scanned

Showing 1 of 7 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.16.0 Code review	7

Extension Version	Code Review Findings
1.16.0	7

Files with findings

2 distinct paths — top paths by unique finding count:

js/background.js6
content/installed.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	js/background.js (line 10728)	The extension fetches JavaScript from https://www.parrottalks.com/js/calc-gttk.js (PTNT.URL_CALC_GTTK) and executes it with eval(), replacing the PTNT.calcGTTk function. A chrome.alarms job re-runs this every 10 minut…	1.16.0
2	Code Injection	high	js/background.js (line 10703)	The Google Translate response body (from https://translate.google.com/translate_a/single) is passed directly to eval() as JavaScript. Any MITM, DNS hijack, or malicious proxy that tampers with that response achieves a…	1.16.0
3	Code Injection	high	js/background.js (line 10645)	The raw response body from the Google Scribe dictionary endpoint (https://www.googleapis.com/scribe/v1/research?...) is eval()'d as JavaScript. Because the API key is hard-coded client-side and the response is eval'd …	1.16.0
4	Code Injection	high	js/background.js (line 10761)	The POS tagger scrapes HTML from the unencrypted endpoint http://nlp.stanford.edu:8080/corenlp/process, pulls text between <pre>...</pre>, and feeds it into window.eval(). Cleartext HTTP plus eval() of third-party-con…	1.16.0
5	Code Injection	medium	js/background.js (line 11560)	Uses a webRequest blocking redirect to encode the current frameId into a synthetic GIF, then calls b.eval(e) inside each subframe to run an arbitrary script string. This is a DOM-injection technique that effectively r…	1.16.0
6	Privilege Escalation	medium	js/background.js (line 11303)	The background service worker exposes an ACTION_BG_XHR RPC that performs arbitrary cross-origin XHR (any URL, any method, any body) and returns the full response to the caller. The content script installed.js (injecte…	1.16.0
7	Privilege Escalation	medium	content/installed.js (line 90)	This content script (injected on *.parrottalks.com and localhost) accepts any window.postMessage with message === PAGE_MESSAGE_XHR_REQUEST and proxies it to the background ACTION_BG_XHR handler, which performs cross-o…	1.16.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

248

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


getbootstrap.com	-	http://getbootstrap.com
github.com	/twbs/bootstrap/blob/master/LICENSE	https://github.com/twbs/bootstrap/blob/master/LICENSE
daneden.me	/animate	http://daneden.me/animate
github.com	/nickpettit/glide	https://github.com/nickpettit/glide
www.apache.org	/licenses/LICENSE-2.0	http://www.apache.org/licenses/LICENSE-2.0
crbug.com	/104058	http://crbug.com/104058
crbug.com	/302548	http://crbug.com/302548
example.com	-	http://example.com/?feature-detect-
github.com	/Rob--W/chrome-api/chrome.tabs.executeScriptInFrame	https://github.com/Rob--W/chrome-api/chrome.tabs.executeScriptInFrame
crbug.com	/245296	http://crbug.com/245296

Showing 1 to 10 of 250 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


15.4.4.18	IPv4	-

4.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

好用，福利很佛心，但不知未來能不能加入AI輔助

木

木特·21 May 2025

居然發生載入Google Chrome失敗！

K柯

Ke 柯Clarence 進輝·25 Jun 2024

超級好用的英文學習軟體，尤其還有PDF查單字功能。累積英文字彙要從文章學，找現成字卡，效率差，背死你。查、存��複習大量節省時間，專注於複習英文單字本身，打趴Anki，但最近指定存放筆記本位��不見了，等了好久也沒人修復，甚是��便，甚憾!

Leo Lin·29 Jan 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Warning: Historically Flagged as Malware

ParrotTalks抄筆記

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 7 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating