Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Quick color picker

CRITICAL RISKRemoved from Chrome Web Store

Quick color picker

ID: mhkpbklbehmjekjdcjiijklngkmhcpap

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

0.7.1

Size

0.54 MB

Rating

1.0/5

Reviews

Users

232,707

Type

Extension

Updated

May 27, 2021

Publisher Contextual Analysis

Author: Juan EstebanView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

232,707

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Get and copy color from web page in one click

Quick Color Picker is a software that provides an eyedropper tool for extracting pixel color from a web page. Also, it extracts the most used color from the web page palette. Quick Color Picker can pick colors on any page elements including images and videos. Features: ⭐ Color picker tool (By selecting “Pick color” option from the popup) ⭐ Displays a dominant color of the page ⭐ Shows recently picked colors ⭐ Copy as HEX or RGB HTML-compatible formats ⭐ Shortcut (Alt-P)

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High1

Medium4

Low1

Versions scanned

Showing 2 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.7.1 Code review	2
0.7.0 Code review	5

Extension Version	Code Review Findings
0.7.1	2
0.7.0	5

Files with findings

3 distinct paths — top paths by unique finding count:

background.js5
content1.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	background.js (line 335)	This code reaches out to a remote domain controlled outside the extension package and downloads a per-extension configuration file. The returned JSON is then used to traverse objects off `globalThis` and invoke functi…	0.7.1
2	Unauthorized Data Collection	high	background.js (line 1)	The extension registers a chrome.tabs.onActivated listener that calls get_screenshot() on every single tab switch the user makes — not only when the color picker is actively in use. This means captureVisibleTab() sile…	0.7.0
3	Remote Code Loading	medium	manifest.json (line 1)	The Content Security Policy for extension pages (background, popup) explicitly whitelists script execution from google-analytics.com and googletagmanager.com, yet no analytics code was found anywhere in the extension …	0.7.0
4	Tracking	medium	background.js (line 29)	The background page loads a remote analytics script and immediately sends telemetry for the extension background context. For a color-picker extension, this is unnecessary to core functionality and indicates user/acti…	0.7.1
5	Unauthorized Data Collection	medium	background.js (line 1)	Two distinct capture paths exist: get_screenshot() dispatches a base64-encoded PNG to the active tab's content script via sendMessage, and capture() routes the same data through bg.doCapture which calls sendMessage({t…	0.7.0
6	Unauthorized Data Collection	medium	content1.js (line 3)	content1.js is injected into every page matched by <all_urls> and immediately issues a get_screenshot message to the background upon injection — before any user gesture. This triggers captureVisibleTab on the backgrou…	0.7.0
7	Tracking	low	background.js (line 1)	The set-color message handler passes t.sender.url (the URL of the page that sent the message) as the fourth argument to bg.setColor(). Although the setColor() function body does not currently store or transmit this UR…	0.7.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.google-analytics.com	/analytics.js	https://www.google-analytics.com/analytics.js
openonlines.com	/cfg/	https://openonlines.com/cfg/
chrome.google.com	/webstore	https://chrome.google.com/webstore
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.google-analytics.com;	-	https://www.google-analytics.com;

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

1.0 out of 5 · 2 most recent reviews

Text reviews

Positive

Negative

I have no idea how to use this picker.

Aneta Burkiewicz·7 Jun 2021

I can't figure out how to use this tool. Unless that changes, I can only give this color picker one star. I would give "no stars" or "negative (0, -1, -2, -3, -4, -5) stars" if the option to do that actually existed. Like 'upside down' stars >;) ((winky blinky)) That would be a STRANGER THING to do; am I right? Right side: UP and so, Left side: DOWN >;)

Robert Allsbrook·30 May 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Quick color picker

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews