Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: SCleaner

CRITICAL RISKRemoved from Chrome Web Store

SCleaner

ID: ikiaampibamhhflhcebmmchkfdadijpb

Could be malicious

Extension Info & Metadata

Status

Removed

Version

2.14.3

Size

0.64 MB

Rating

3.0/5

Reviews

Users

811,861

Type

Extension

Updated

Sep 2, 2020

Publisher Contextual Analysis

Author: Larry KalbView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

811,861

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Smart browsing history and tracking information cleaner.

Scleaner is a tool for cleaning a browsing history with powerful configuration. Features: ⭐ Remove data on website level or globally ⭐ Remove all tracking data for a specific tab ⭐ You can clean only the recent history e.g. last hour Quick start: 1. Click the toolbar button 2. Check out the configuration screen and set up which types of data you want to clean. 3. Press the “Clean” button

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High2

Medium0

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.14.3 Code review	3

Extension Version	Code Review Findings
2.14.3	3

Files with findings

3 distinct paths — top paths by unique finding count:

background.html1
manifest.json1
popup/popup.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	background.html (line 1)	The persistent background page loads jQuery from an external, non-official Google Cloud Storage bucket named 'analytica-stat' rather than using the bundled /lib/jquery.js already present in the extension. Because the …	2.14.3
2	Remote Code Loading	high	manifest.json (line 24)	The Content Security Policy explicitly whitelists the entire https://storage.googleapis.com origin for script execution, which is the domain hosting the suspicious external jQuery payload in background.html. This deli…	2.14.3
3	Unauthorized Data Collection	high	popup/popup.js (line 132)	On every popup open, the extension injects JavaScript into every open tab across all frames to enumerate all hyperlink hrefs, script src values, and iframe/frame locations from the page DOM. This constitutes arbitrary…	2.14.3

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


storage.googleapis.com	/analytica-stat/jquery-3.1.1.min.js	https://storage.googleapis.com/analytica-stat/jquery-3.1.1.min.js
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/master/LICENSE	https://github.com/twbs/bootstrap/blob/master/LICENSE
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license
github.com	/whatwg/html/issues/2369	https://github.com/whatwg/html/issues/2369
html.spec.whatwg.org	-	https://html.spec.whatwg.org/#nonce-attributes
js.foundation	-	https://js.foundation/

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-

5.0 out of 5 · 1 most recent review

Text reviews

Positive

Negative

Just pls warn only on cleaning everything (hopefully I unclicked some options)! Good concept tho :)

kliop00023·23 Oct 2020

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

SCleaner

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version3

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating