Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Quick color picker

CRITICAL RISKRemoved from Chrome Web Store

Quick color picker

ID: medhnjegdfgmhpammlpfokdacikkdpjj

Could be malicious

Extension Info & Metadata

Status

Removed

Version

0.5.2

Size

0.55 MB

Rating

4.8/5

Reviews

108

Users

210,391

Type

Extension

Updated

Nov 16, 2020

Publisher Contextual Analysis

Author: Catalina SchuppeView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

210,391

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Get and copy color from web page in one click

Quick Color Picker is a software that provides an eyedropper tool for extracting pixel color from a web page. Also, it extracts the most used color from the web page palette. Quick Color Picker can pick colors on any page elements including images and videos. Features: ⭐ Color picker tool (By selecting “Pick color” option from the popup) ⭐ Displays a dominant color of the page ⭐ Shows recently picked colors ⭐ Copy as HEX or RGB HTML-compatible formats ⭐ Shortcut (Alt-P)

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High4

Medium3

Low1

Versions scanned

Showing 2 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.5.2 Code review	3
0.5.1 Code review	5

Extension Version	Code Review Findings
0.5.2	3
0.5.1	5

Files with findings

3 distinct paths — top paths by unique finding count:

background.js4
averageColor.js3
inc/cointipper/jquery.cointipper-pack.min.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	high	background.js (line 67)	This code dynamically builds and injects a Google Tag Manager script URL into the extension background page. Because the script is remote and runs in a privileged extension context, it enables behavior changes outside…	0.5.2
2	Unauthorized Data Collection	high	averageColor.js (line 124)	This content script—injected silently into every webpage the user visits via the <all_urls> match—immediately requests a full visible-tab screenshot from the background on every single page load, without any user inte…	0.5.1
3	Unauthorized Data Collection	high	background.js (line 339)	The background page listens to every tab-switch event and silently captures a full PNG screenshot of the newly active tab using chrome.tabs.captureVisibleTab. This occurs continuously throughout normal browser use wit…	0.5.1
4	Unauthorized Data Collection	high	background.js (line 234)	The get_screenshot function captures the full visible browser tab as a base64-encoded PNG and injects this image data as a message into the content script running inside the active tab's page context. Sending a screen…	0.5.1
5	Other	medium	averageColor.js (line 95)	A fully-implemented base64-to-byte-array conversion function is defined in the content script that receives raw screenshot PNG data from the background, but this function is never called anywhere in the extension code…	0.5.1
6	Unauthorized Data Collection	medium	averageColor.js (line 136)	This content script requests a screenshot as soon as it runs, with no explicit user interaction. Since the script is declared for `<all_urls>`, this creates passive collection of page imagery on every site the user vi…	0.5.2
7	Unauthorized Data Collection	medium	background.js (line 260)	This function captures the full visible contents of the active tab and forwards the resulting image data to a content script. In the same file, `chrome.tabs.onActivated.addListener(function(info) { bg.get_screenshot()…	0.5.2
8	Other	low	inc/cointipper/jquery.cointipper-pack.min.js (line 1)	A cryptocurrency donation widget library (jquery.cointipper) is bundled in the extension but is not referenced in any HTML or JavaScript file, nor listed in web_accessible_resources. The library supports Bitcoin, Doge…	0.5.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/ssorallen/jquery-scrollstop	https://github.com/ssorallen/jquery-scrollstop
github.com	/jquery/jquery-migrate/blob/master/src/event.js	https://github.com/jquery/jquery-migrate/blob/master/src/event.js#L25
github.com	/jeremymouton/cointipper	https://github.com/jeremymouton/cointipper
www.openjs.com	/scripts/events/keyboard_shortcuts/	http://www.openjs.com/scripts/events/keyboard_shortcuts/
nicolasgallagher.com	/micro-clearfix-hack/	http://nicolasgallagher.com/micro-clearfix-hack/
code.google.com	/p/chromium/issues/detail	https://code.google.com/p/chromium/issues/detail?id=506893
cssfontstack.com	-	http://cssfontstack.com
github.com	/suitcss/components-flex-embed	https://github.com/suitcss/components-flex-embed
snook.ca	/archives/html_and_css/hiding-content-for-accessibility	http://snook.ca/archives/html_and_css/hiding-content-for-accessibility
getbootstrap.com	-	https://getbootstrap.com/

Showing 1 to 10 of 80 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-

4.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Dosen't work.

Dajon Williams·3 Mar 2021

It lets you pick any beauti color very fast, simple and great extension!

X86'th ASMщик·1 Mar 2021

very good

ДС

Дмитро Соколов·1 Mar 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Quick color picker

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews