Extension Auditor
Extension Auditor
Sign Up

Rich Instead

ID: hebejghkcdhibhjpfaaafbjfhbnhjbhj

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Removed
Version
0.0.1
Size
7.60 MB
Rating
0.0/5
Reviews
0
Users
3
Type
Extension
Updated
Dec 23, 2021
Category
12_shopping
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
PacksView Profile
Privacy
Privacy Policy
Country
GB
Address
7 Bell Yard London WC2A 2JR GB
Website
Visit
Total Extensions
2
Active
1
Obsolete
1
Listed
1
Unlisted
1
Total Users
55

Rich Instead Chrome extension.

When you’re in cart, the extension pops and reminds you of your goals, how much you had to work to earn the money you’re about to spend, etc. Then you choose if you want to proceed with the purchase or cancel it and be “rich instead” — where cancelling takes you to a landing page that encourages you to put that $$ in your savings account or invest it (without making recommendations for investments, etc).

Item
Type
Severity
Description
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
URLs
137
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
www.apache.org/licenses/LICENSE-2.0http://www.apache.org/licenses/LICENSE-2.0
securetoken.google.com-https://securetoken.google.com/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/define-locale/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/js-date/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/min-max/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/add-inverted-param/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/zone/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/dst-shifted/
webpack.js.org/configuration/resolve/https://webpack.js.org/configuration/resolve/#resolvemainfields\n
github.com/rollup/@rollup/plugin-node-resolve/nhttps://github.com/rollup/@rollup/plugin-node-resolve\n
Showing 1 to 10 of 140 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
0.0.1
Latest
7.60 MB
Malicious
—
65212ec9cc4156f5c649e59b42c5d5dccffb1b21b0a15223b4185dbab812a170
Showing 1 to 1 of 10 rows
Rows per page:

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In