Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Repeat button

CRITICAL RISKRemoved from Chrome Web Store

Repeat button

ID: bgflknnodgboaeldeianfhmmbeeadlhp

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.6.2

Size

0.41 MB

Rating

1.8/5

Reviews

Users

826,754

Type

Extension

Updated

Dec 3, 2020

Publisher Contextual Analysis

Author: Alexandrine PourosView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

826,754

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Make videos play on repeat by pressing single button.

Repeat Button adds automatic replay capabilities to online videos. It simply adds a new button to online videos. Once activated it plays a video in a loop. Repeat Button works on Youtube, many popular video sites, and generic HTML5 videos. How to use: You can enable the repeat mode both from the toolbar or from the player.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium4

Low1

Versions scanned

Showing 2 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.6.3 Code review	3
1.6.2 Code review	4

Extension Version	Code Review Findings
1.6.3	3
1.6.2	4

Files with findings

4 distinct paths — top paths by unique finding count:

popup.js3
popup.html2
bg.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	popup.js (line 40)	The popup uses `chrome.tabs.executeScript` with inline string-based JavaScript code injected into arbitrary tab IDs obtained from the full tab enumeration. While the injected strings appear limited to video-playback t…	1.6.2
2	Unauthorized Data Collection	high	popup.js (line 1)	The popup queries ALL open tabs with no filter (`chrome.tabs.query({})`) and collects each tab's ID, favicon URL, and title across the entire browser session. A repeat-button extension only needs to interact with the …	1.6.2
3	Code Injection	medium	popup.js (line 41)	The popup injects raw JavaScript strings into arbitrary tabs via `chrome.tabs.executeScript(..., { code: ... })`. The injected code is static in this version, but this is still a code-injection primitive that avoids f…	1.6.3
4	Privilege Escalation	medium	bg.js (line 4010)	This background script enumerates every open tab and injects `inject.js` into each one immediately on startup. For a simple video repeat utility, blanket execution across all tabs is broader than necessary and gives t…	1.6.3
5	Remote Code Loading	medium	popup.html (line 4)	The extension popup fetches Bootstrap CSS from the external CDN `stackpath.bootstrapcdn.com` at runtime. Although an SRI hash is present, the CDN domain itself is a third-party dependency: if the domain is seized, exp…	1.6.2
6	Unauthorized Data Collection	medium	manifest.json (line 12)	The content script (and a full copy of jQuery 3.4.1) is injected into every HTTP/HTTPS page AND every iframe (`all_frames: true`). This means the extension's JavaScript runs inside cross-origin iframes such as embedde…	1.6.2
7	Remote Code Loading	low	popup.html (line 5)	The extension popup pulls CSS from a third-party CDN instead of packaging all UI resources locally. Remote resource loading in extension pages is a suspicious pattern because it gives an external party influence over …	1.6.3

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


stackpath.bootstrapcdn.com	/bootstrap/4.4.1/css/bootstrap.min.css	https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license
github.com	/whatwg/html/issues/2369	https://github.com/whatwg/html/issues/2369
html.spec.whatwg.org	-	https://html.spec.whatwg.org/#nonce-attributes
js.foundation	-	https://js.foundation/
jsperf.com	/thor-indexof-vs-for/5	https://jsperf.com/thor-indexof-vs-for/5
www.w3.org	/TR/css3-selectors/	http://www.w3.org/TR/css3-selectors/#whitespace
www.w3.org	/TR/CSS21/syndata.html	http://www.w3.org/TR/CSS21/syndata.html#value-def-identifier

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-

1.3 out of 5 · 4 most recent reviews

Text reviews

Positive

Negative

You can repeat on youtube by right clicking then press loop So dont get the extension

Flaming BaconRoblox·28 Feb 2021

It works like for 7 seconds and then it doesnt worrk , you should fix it now before i do the take the l dance in front of your house at 3am

OrangeVanillaCokeXD·25 Jan 2021

im trying to look the video i have open on youtube and it only says no videos found...

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Repeat button

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 3 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews