Productivity Timer

ID: finifbaeggpcmoendjpfkjjijcimejee

Could be malicious

Supported Languages

🇬🇧British English

Extension Info & Metadata

Status
Removed
Version
2.1
Size
9.09 MB
Rating
4.0/5
Reviews
5
Users
5
Type
Extension
Updated
Jul 18, 2025
Category
Productivity Tools
Price
Free
Featured
No
Visibility
Listed
Mature
Yes
By Google
No
Trusted
No

Publisher Contextual Analysis

Author
Precious Kelvin.NView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
5

A simple productivity timer extension to help you stay focused.

Stay focused and productive with the Productivity Timer extension! This lightweight tool helps you manage work sessions using customizable timers, break reminders, and optional notifications. Perfect for students, remote workers, or anyone who wants to avoid distractions.

Item
Type
Severity
Description
*://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

The manifest declares `*://*/*` host permission granting access to every URL the user visits, but neither background.js nor popup.js contains any content-script injection, fetch/XHR, tabs API use, or webRequest listener that would legitimately require host access. Requesting broad host access that the code never exercises is a common pre-staging pattern for malicious updates, since a later update could add exfiltration logic without triggering a permission prompt.

manifest.json (Line 17)
  "permissions": [    "notifications",    "storage",    "alarms"  ],  "host_permissions": ["*://*/*"],  "background": {    "service_worker": "background.js"  }}

By severity

Critical0
High0
Medium1
Low0

Versions scanned

None of the 1 scanned version has more than one unique code-review finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path — top paths by unique finding count:

  • manifest.json1
S.No.
Category
Severity
File
Summary
Found in Version
1Privilege Escalation
medium
manifest.json (line 17)The manifest declares `*://*/*` host permission granting access to every URL the user visits, but neither background.js nor popup.js contains any content-script injection, fetch/XHR, tabs API use, or webRequest listen…
URLs
702
IPv4
85
IPv6
16

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
github.com/socketio/socket.io/issues/3833.https://github.com/socketio/socket.io/issues/3833.
github.com/microsoft/TypeScript/issues/41778https://github.com/microsoft/TypeScript/issues/41778
github.com/socketio/emitter.githttps://github.com/socketio/emitter.git
github.com/sindresorhus/component-emitterhttps://github.com/sindresorhus/component-emitter
socket.io-https://socket.io/
github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/corshttps://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cors
github.com/plumahttps://github.com/pluma
github.com/gtpan77https://github.com/gtpan77
github.com/bjohansebashttps://github.com/bjohansebas
Showing 1 to 10 of 710 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

74.125.127.100
IPv4
-
1.3.101.110
IPv4
-
1.3.101.111
IPv4
-
1.3.101.112
IPv4
-
1.3.101.113
IPv4
-
0.0.0.0
IPv4
-
224.0.0.114
IPv4
-
127.0.0.1
IPv4
-
10.0.0.2
IPv4
-
4.4.4.4
IPv4
-
74.125.79.104
IPv4
-
74.125.79.105
IPv4
-
74.125.79.106
IPv4
-
93.184.216.34
IPv4
-
8.1.2.4
IPv4
-
192.168.1.1
IPv4
-
123.123.123.123
IPv4
-
10.0.0.1
IPv4
-
10.0.0.10
IPv4
-
10.0.0.3
IPv4
-
222.111.111.222
IPv4
-
4.2.2.13
IPv4
-
123.1.2.3
IPv4
-
255.0.0.0
IPv4
-
192.168.1.108
IPv4
-
255.255.255.0
IPv4
-
11.3.244.8
IPv4
-
2.1.3.3
IPv4
-
5.5.2.5
IPv4
-
15.5.8.1
IPv4
-
245.223.49.4
IPv4
-
156.186.26.203
IPv4
-
116.205.134.248
IPv4
-
134.17.186.14
IPv4
-
135.15.217.216
IPv4
-
1.178.27.36
IPv4
-
157.137.23.21
IPv4
-
1.114.168.11
IPv4
-
127.176.18.21
IPv4
-
178.137.22.148
IPv4
-
148.158.164.12
IPv4
-
126.2.19.228
IPv4
-
1.83.127.112
IPv4
-
164.15.23.243
IPv4
-
104.1.213.23
IPv4
-
117.137.242.115
IPv4
-
222.112.21.48
IPv4
-
42.61.184.116
IPv4
-
102.153.192.28
IPv4
-
105.147.16.197
IPv4
-
192.14.28.21
IPv4
-
31.102.38.21
IPv4
-
107.143.203.172
IPv4
-
104.17.188.32
IPv4
-
118.205.226.164
IPv4
-
226.114.3.203
IPv4
-
126.103.123.38
IPv4
-
175.138.122.64
IPv4
-
164.152.31.203
IPv4
-
156.138.204.132
IPv4
-
102.124.253.14
IPv4
-
208.42.14.47
IPv4
-
11.15.178.173
IPv4
-
3.2.5.4
IPv4
-
1.1.1.3
IPv4
-
4.2.6.6
IPv4
-
2.2.2.6
IPv4
-
2.1.4.4
IPv4
-
11.2.4.2
IPv4
-
1.3.6.9
IPv4
-
2.8.8.4
IPv4
-
192.136.1.0
IPv4
-
192.168.0.1
IPv4
-
10.2.154.26
IPv4
-
1.2.13.1
IPv4
-
192.168.1.46
IPv4
-
192.168.1.76
IPv4
-
10.104.103.181
IPv4
-
10.104.100.12
IPv4
-
4.1.2.7
IPv4
-
3.14.5.9
IPv4
-
2.8.3.2
IPv4
-
4.4.3.2
IPv4
-
15.2.3.5
IPv4
-
7.1.0.7
IPv4
-
2606:2800:220:1:248:1893:25c8:1946
IPv6
-
25:FE:39:32:D9:63:8C:8A
IPv6
-
D8:3E:4C:1D:98:DB:71:E4
IPv6
-
1A:48:03:98:EA:22:6A:BD
IPv6
-
FC:A1:9A:29:87:D8:3E:4C
IPv6
-
1D:98:DB:71:E4:1A:48:03
IPv6
-
98:EA:22:6A:BD:8B:93:16
IPv6
-
40:3E:06:2A:26:53:05:91
IPv6
-
13:28:5B:AF:80:A0:D4:AE
IPv6
-
42:2C:84:8C:9F:78:FA:D0
IPv6
-
1F:C9:4B:C5:B8:7F:EF:1A
IPv6
-
74:31:E5:F4:C3:C1:CE:46
IPv6
-
90:77:4F:0B:61:E0:54:40
IPv6
-
88:3B:A9:A0:1E:D0:0B:A6
IPv6
-
AB:D7:80:6E:D3:B1:18:CF
IPv6
-
ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
IPv6
-
Showing 1 to 101 of 110 rows
Rows per page:
Version
Size
Is Malicious
Findings
Permhash
2.1
Latest
9.09 MB
Malicious
1
Showing 1 to 1 of 10 rows
Rows per page:

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.