Extension Auditor
Extension Auditor
Sign Up

Pipa

ID: fgkcdbofamlphcnhoabljcnecgcnphfc

Could be malicious

Supported Languages

🇬🇧British English

Extension Info & Metadata

Status
Removed
Version
0.0.0.3
Size
2.88 MB
Rating
5.0/5
Reviews
1
Users
5
Type
Extension
Updated
Jul 26, 2019
Category
12_shopping
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
meetpipaView Profile
Privacy
Privacy Policy
Country
United Kingdom
MX records exist
No
Domain exists
No
Is disposable
No
Is role-based
Yes
Mailbox exists
No
Address
Homelands-the-creek Sunbury on thames London TW16 6BY United Kingdom
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
5

Pipa Chrome Extension

Pipa - Your personal online nutrition adviser Pipa reviews your online basket as you shop, rates your food choices and recommends alternatives. Pipa makes it easy for everyone to make healthier choices. Download it FREE and never wonder How it works: Click ‘Add to Chrome’. Visit an online grocery store (currently compatible with Tesco and Sainsbury’s). Browse food items to automatically see and compare pipa scores. Register to see your full basket score, nutritional contents, ingredients and heathier alternatives available.

Item
Type
Severity
Description
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
geolocation
Permission
High
This permission accesses precise device location. Rated High because it can track user movements, identify physical locations, and compromise user privacy.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
declarativeContent
Permission
Medium
This permission controls extension activation based on page content. Rated Medium because it can monitor page content matches and selectively activate extension features.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
URLs
145
IPv4
3
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
www.w3.org/2000/svghttp://www.w3.org/2000/svg
www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtdhttp://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd
www.w3.org/1999/xlinkhttp://www.w3.org/1999/xlink
www.bohemiancoding.com/sketchhttp://www.bohemiancoding.com/sketch
www.w3.org/1999/02/22-rdf-syntax-nshttp://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com/exif/1.0/http://ns.adobe.com/exif/1.0/
www.iec.chiec-http://www.iec.chIEC
www.iec.chdesc.iec-http://www.iec.chdesc.IEC
jedwatson.github.io/classnameshttp://jedwatson.github.io/classnames
www.google-analytics.com/analytics.jshttps://www.google-analytics.com/analytics.js
Showing 1 to 10 of 150 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
2.3.3.3
IPv4
-
2.3.3.1
IPv4
-
0.0.0.3
IPv4
-
Version
Size
Is Malicious
Findings
Permhash
0.0.0.3
Latest
2.88 MB
Malicious
—
74d249c043ffcd86d11f341f4706424ea9c8ef6da38adf9d30a7d38f196e3ef3
Showing 1 to 1 of 10 rows
Rows per page:

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In