Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Readable Web

CRITICAL RISKRemoved from Chrome Web Store

Readable Web

ID: hkmfmebhfjkifojdbikjaklcipebaemk

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

2.0.4

Size

0.79 MB

Rating

5.0/5

Reviews

Users

9,000

Type

Extension

Updated

Dec 13, 2024

Publisher Contextual Analysis

Author: dev-opsView Profile
Privacy: Privacy Policy
Help: Help Center
Country: US
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Address: 109 Vendola Drive San Rafael, CA 94903 US

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

9,000

Email Change History

1 change

Dec 4, 2024

Domain changed

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Converts web pages into Readable English text and provides tools to help you read and understand English text.

This Chrome extension will convert standard english web page text into Readable English (RE) to support RE customers as they improve their reading skills. You must be logged into your RE account to use this extension.

User Growth

Showing data from Dec 14, 2022 to Apr 02, 2024

Versions

-82%(-41,000 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 0 ratings

Average Rating

Current: 0.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium6

Low1

Versions scanned

Showing 1 of 6 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.0.0 Code review	8

Extension Version	Code Review Findings
2.0.0	8

Files with findings

4 distinct paths — top paths by unique finding count:

background.js5
content_convert_full_page.js1
content_global.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Unauthorized Data Collection	high	background.js (line 773)	In `convertAuto` mode the extension automatically harvests every visible word from every page the user visits (content_convert_full_page.js fillFullPageNodeArray) and POSTs the words plus surrounding context AND the p…	2.0.0
2	Code Injection	medium	content_global.js (line 68)	`createReadableInnerHTML` builds an HTML string by concatenating page-derived text and assigns it to `innerHTML` in several callers (createReadableNode, updateNodeTextWithDataAttribute, createDefinitionElement, create…	2.0.0
3	Other	medium	background.js (line 152)	A hard-coded staging endpoint (`auth2-staging.readablenglish.com/auth/lp-legacy`) is fetched in production for the explicit purpose of setting an `__re` authentication cookie. Production code calling staging infrastru…	2.0.0
4	Phishing	medium	background.js (line 63)	`loginUrl` is mutated at runtime from a value returned by `authorizationUrl`'s JSON response (`authJSONObject.loginURL`). That URL is later used in `redirectUserToLogin` to redirect the active tab. A compromised or at…	2.0.0
5	Tracking	medium	content_convert_full_page.js (line 276)	Each conversion event reports the exact `document.documentURI` of the visited page back to the background service worker (which forwards it to the remote POS endpoint). Combined with the auto-mode page-text upload, th…	2.0.0
6	Unauthorized Data Collection	medium	background.js (line 656)	Selected text from any web page (including potentially sensitive content like internal docs, emails, or chat) is sent unencoded as a query-string parameter to backend.readablenglish.com. The `text` value is interpolat…	2.0.0
7	Unauthorized Data Collection	medium	manifest.json (line 35)	Content scripts are injected into every URL on the web (`:///*`) and into all frames. Combined with the auto-mode page-text exfiltration, this gives the extension passive read-access to the text of essentially every…	2.0.0
8	Other	low	background.js (line 19)	The manifest declares only `https://auth.readablenglish.com/readable-web-validation` as a host permission, but the background script issues fetches to several additional domains (backend.readablenglish.com, auth2.read…	2.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


iboysoft.com	/news/convert-chrome-extension-to-safari.html	https://iboysoft.com/news/convert-chrome-extension-to-safari.html
static.readablenglish.com	/re-browser-extension	https://static.readablenglish.com/re-browser-extension
backend.readablenglish.com	-	https://backend.readablenglish.com
auth.readablenglish.com	/web-extension-login	https://auth.readablenglish.com/web-extension-login
auth2.readablenglish.com	/readable-web-validation	https://auth2.readablenglish.com/readable-web-validation
auth2.readablenglish.com	/auth/lp-legacy	https://auth2.readablenglish.com/auth/lp-legacy
readablenglish.com	/knowledge/why-am-i-seeing-this-page-when-i-try-to-use-the-readable-web-browser-extension	https://readablenglish.com/knowledge/why-am-i-seeing-this-page-when-i-try-to-use-the-readable-web-browser-extension
readablenglish.com	/knowledge/how-do-i-convert-a-google-doc	https://readablenglish.com/knowledge/how-do-i-convert-a-google-doc?hs_preview=KmYYDfqy-128025169289
readablenglish.com	/knowledge/how-do-i-convert-pdf-documents	https://readablenglish.com/knowledge/how-do-i-convert-pdf-documents
docs.google.com	/document/	https://docs.google.com/document/

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Readable Web

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Email Change History

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 6 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating