Chrome Web Store
10Versions
1Code reviewed

Caution required

Suspicious in code review (v0.0.6)

Our reviewer found behaviour consistent with malware in version 0.0.6, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

What our analysis found

QR Code Reader - Sateraito Office, used by 800,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in April 2024.

Key findings

  • high· other —The bundled manifest version (2) and permissions (storage, tabs, activeTab) differ from the published Chrome Web Store listing, which reports manifest version 3, permissions ["storage","tabs"], and web_accessible_resources with <all_urls> referencing ' '. This mismatch suggests the live extension may have been altered from the provided code.

The bundled source code appears benign, implementing a QR code scanner with no unauthorized data exfiltration. However, the bundled manifest (v2, with activeTab) does not match the published manifest from the Chrome Web Store (v3, with web_accessible_resources and different permissions). This discrepancy may indicate a delayed-malicious update or listing error, warranting suspicion.

QR Code Reader - Sateraito Office

QR Code Reader - Sateraito Office Chrome extension security report

ID: lfkmkidopioccceiemjmndppkadgbmid

Supported Languages

🇺🇸English
🇯🇵Japanese

Extension Info & Metadata

Status
Active
Version
1.0.6
Size
0.62 MB
Rating
4.3/5
Reviews
3
Users
800,000
Type
Extension
Updated
Apr 11, 2024
Category
Accessibility
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
21extensions
1 no longer listed

Publisher Contextual Analysis

Trusted
Author
Sateraito Office
MX records exist
No
Domain exists
No
Is disposable
No
Is role-based
No
Mailbox exists
No
Website
Visit
Extensions
21
Active
20
Obsolete
1
Listed
19
Unlisted
2
Users
1,851,741

Screenshots & videos

Screenshot 1
Screenshot 2

Install growth

Item
Type
Severity
Description
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

You can scan the QR code and open the WEB page a on Chromebook or Chrome browser by QR Code Reader. You can also save scan history,…

Read the publisher’s full description

After installing the QR code function on your Chromebook or Chrome browser, you can easily scan the QR code on your Chromebook or Chrome browser to open the QR code web page. In addition, you can easily save the scan history, create a short URL of the open URL, and create a QR code of the open URL.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
5

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version
Size
Verdict
Findings
Permhash
1.0.5
Latest
0.62 MBNot scanned—
58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
1.0.4
0.67 MBNot scanned—
58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
1.0.3
0.66 MBNot scanned—
0cda24b75adcfdca24cd7acbd00abd6078b173553f62ca237d712ffb37e62f1b
1.0.2
0.62 MBNot scanned—
0cda24b75adcfdca24cd7acbd00abd6078b173553f62ca237d712ffb37e62f1b
1.0.1
0.62 MBNot scanned—
0cda24b75adcfdca24cd7acbd00abd6078b173553f62ca237d712ffb37e62f1b
0.0.8
0.61 MBNot scanned—
0cda24b75adcfdca24cd7acbd00abd6078b173553f62ca237d712ffb37e62f1b
0.0.7
0.61 MBNot scanned—
0cda24b75adcfdca24cd7acbd00abd6078b173553f62ca237d712ffb37e62f1b
0.0.6
0.61 MBCaution0
0cda24b75adcfdca24cd7acbd00abd6078b173553f62ca237d712ffb37e62f1b
0.0.5
0.66 MBNot scanned—
0cda24b75adcfdca24cd7acbd00abd6078b173553f62ca237d712ffb37e62f1b
1.0.6
0.62 MBNot scanned—
58dd7981abfd4c2d32a79c42f462a9d91c27dbc3cbe354d3f71c88127aa7f9de
Showing 1 to 10 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.