ScratchXchange

ID: hekikcdnmljpnclcopfhfddmiokppmmo

Could be malicious

Supported Languages

🇹🇭Thai

Extension Info & Metadata

Status
Removed
Version
1.0.7
Size
0.46 MB
Rating
0.0/5
Reviews
0
Users
2
Type
Extension
Updated
Jan 3, 2022
Category
11_web-development
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes

Publisher Contextual Analysis

Trusted
Author
kantineeView Profile
Country
Thailand
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
Paholyothin Bangkok 10210 Thailand
Website
Visit
Total Extensions
2
Active
0
Obsolete
2
Listed
2
Unlisted
0
Total Users
79

ScratchXchange

A personalized educational chatbot for fostering computational thinking

Item
Type
Severity
Description
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
https://flaskapi-kk.herokuapp.com/*
Permission
Unknown
No classification available for this permission.
https://scratch.mit.edu/*
Permission
Unknown
No classification available for this permission.
https://*/*
Permission
Unknown
No classification available for this permission.
http://*/*
Permission
Unknown
No classification available for this permission.
URLs
95
IPv4
1
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

flaskapi-kk.herokuapp.com/savecanvas/https://flaskapi-kk.herokuapp.com/savecanvas/
www.gstatic.com/dialogflow-console/fast/messenger/bootstrap.jshttps://www.gstatic.com/dialogflow-console/fast/messenger/bootstrap.js?v=1
ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.jshttps://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
assess-api.herokuapp.com/assess_a2/https://assess-api.herokuapp.com/assess_a2/
png.pngtree.com/svg/20170908/submit_successfully_405985.pnghttps://png.pngtree.com/svg/20170908/submit_successfully_405985.png
projects.scratch.mit.edu-https://projects.scratch.mit.edu/
flaskapi-kk.herokuapp.com/savestate/https://flaskapi-kk.herokuapp.com/savestate/
127.0.0.1/savestate/http://127.0.0.1:5000/savestate/
scratch-personalized.herokuapp.com/api/v1/update_scratch_urlhttps://scratch-personalized.herokuapp.com/api/v1/update_scratch_url
projects.scratch.mit.edu/336105401https://projects.scratch.mit.edu/336105401
Showing 1 to 10 of 100 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

127.0.0.1
IPv4
-
Version
Size
Is Malicious
Findings
Permhash
1.0.1
Latest
0.45 MB
Malicious
—
1.0
0.45 MB
Malicious
—
1.0.7
0.46 MB
Malicious
—
Showing 1 to 3 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.