Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Pointer Extension

CRITICAL RISKRemoved from Chrome Web Store

Pointer Extension

ID: dddlmphelnhafladmibfpcmmnakgebmp

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.0

Size

0.67 MB

Rating

5.0/5

Reviews

Users

Type

Extension

Updated

Dec 10, 2021

Publisher Contextual Analysis

Author: https://pointer.geView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Source candidates to your Pointer account with a single click.

Source candidates from LinkedIn profiles to your Pointer account with a single click. • Full resume • Contact info • Education • Experience – with descriptions • Time spent in current and previous jobs • Skills Flexibility of adding resumes to the different published jobs and different companies. Spend less time entering data, and free up more time for the true work of hiring. ⚠ You need a Pointer account to use the Pointer Extension. Request access here: https://app.pointer.ge/

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

-11.11%(-1 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 1 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium2

Low2

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0 Code review	7

Extension Version	Code Review Findings
1.0	7

Files with findings

4 distinct paths — top paths by unique finding count:

modules/linkedin.js4
importer.js1
js/adopto-sidebar-api.js1
js/adopto.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	high	modules/linkedin.js (line 249)	Extracts the LinkedIn JSESSIONID session cookie and uses it as a csrf-token header to call LinkedIn's internal Voyager APIs (full profile + private contact info). This is direct session-token scraping that impersonate…	1.0
2	Data Exfiltration	high	js/adopto-sidebar-api.js (line 865)	The fully-assembled candidate object — including name, title, email, phone, full work history, education, projects, languages, profile photo URL, and source URL — is shipped to the background service worker, which for…	1.0
3	Unauthorized Data Collection	high	modules/linkedin.js (line 272)	Pulls private LinkedIn contact info (emailAddress, twitterHandles, websites, phoneNumbers) via the internal profileContactInfo API and stores it in the candidate model that is later POSTed to app.pointer.ge. This is c…	1.0
4	Other	medium	importer.js (line 1)	The MV3 service worker imports `js/adopto-button.js` and `js/background-api.js`, but neither file is present in the analyzed bundle. This means the privileged background logic that handles `auth`, `getUserProfile`, `c…	1.0
5	Unauthorized Data Collection	medium	modules/linkedin.js (line 689)	Regex-scrapes any email addresses embedded in profile summary, headline, and position descriptions from the LinkedIn page HTML. Emails harvested this way are typically not exposed in LinkedIn's public profile UI and a…	1.0
6	Tracking	low	modules/linkedin.js (line 203)	Maintains a local browsing history log (`linkedinProfileHistory`) of every LinkedIn URL the user visits and every sourcing action they take. While stored client-side in sessionStorage, the same structure is appended o…	1.0
7	Tracking	low	js/adopto.js (line 76)	Sentry is initialized inside the content script that runs on LinkedIn, GitHub, Twitter, StackOverflow, etc. Any unhandled promise rejection — which can include URLs and DOM-derived data from those third-party pages — …	1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


getbootstrap.com	-	http://getbootstrap.com
github.com	/twbs/bootstrap/blob/master/LICENSE	https://github.com/twbs/bootstrap/blob/master/LICENSE
github.com	/h5bp/html5-boilerplate/blob/master/src/css/main.css	https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
fontawesome.com	-	https://fontawesome.com
fontawesome.com	/license/free	https://fontawesome.com/license/free
fontello.comfont	-	http://fontello.comFont
fontawesome.io	-	http://fontawesome.io
fontawesome.io	/license	http://fontawesome.io/license
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink

Showing 1 to 10 of 50 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


9.4.1.1	IPv4	-
7.9.2.1	IPv4	-
3.3.5.3	IPv4	-
1.1.3.5	IPv4	-
3.3.8.8	IPv4	-
1.1.3.3	IPv4	-
1.1.8.5	IPv4	-
1.4.3.5	IPv4	-
41.6.1.5	IPv4	-
73.3.3.3	IPv4	-
3.1.5.1	IPv4	-
8.7.9.3	IPv4	-
124.2.3.9	IPv4	-
2.6.3.5	IPv4	-
2.9.2.1	IPv4	-
4.1.6.2	IPv4	-
37.7.2.2	IPv4	-
14.9.7.6	IPv4	-
4.5.6.2	IPv4	-
2.2.6.5	IPv4	-
2.3.9.6	IPv4	-
1.4.2.8	IPv4	-
17.82.1.2	IPv4	-
7.76.34.21	IPv4	-
24.71.36.66	IPv4	-
4.15.88.22	IPv4	-
4.83.28.92	IPv4	-
10.6.2.8	IPv4	-
4.62.85.77	IPv4	-
7.21.27.25	IPv4	-
55.51.88.71	IPv4	-
1.69.87.48	IPv4	-
4.6.38.13	IPv4	-
1.13.49.4	IPv4	-
27.23.79.15	IPv4	-
8.92.15.75	IPv4	-
1.4.5.2	IPv4	-
1.8.1.2	IPv4	-
1.3.2.5	IPv4	-
12.7.3.2	IPv4	-
4.5.7.9	IPv4	-
10.8.1.1	IPv4	-
12.5.1.1	IPv4	-
1.2.2.3	IPv4	-
4.92.49.49	IPv4	-
2.46.49.49	IPv4	-
6.3.2.6	IPv4	-

Showing 1 to 47 of 50 rows

Rows per page:

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Pointer Extension

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating