Scrolller Helper
ID: mfhejclnalgopkcffoojeihhnnagocml
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- pedroView Profile
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- US
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
- Address
- 251 Little Falls Drive, Wilmington New Castle County, DE 19808 US
Help Scrolller grow by contributing content while you browse.
Scrolller Helper lets you contribute to Scrolller's content library effortlessly while you browse. When you visit a subreddit on Scrolller, the extension finds new Reddit posts that haven't been added yet and uploads them on your behalf — images, galleries, videos, and Imgur albums are all supported. How it works: • Browse Scrolller as you normally would • The extension detects which subreddit you're viewing and checks for new content • New posts are fetched, media is downloaded, and everything is uploaded automatically • A live progress bar keeps you informed every step of the way Features: • One-click contribute or passive auto-contribute mode • Supports images, Reddit galleries, v.redd.it videos, and Imgur albums • Smart deduplication, only uploads content Scrolller doesn't already have • Real-time progress tracking in the popup and on-page banner • Contributor stats so you can see your impact Why install it? Every user helps expand Scrolller's library faster. Your browser does the work in the background — just browse and contribute. The more people who join, the more complete the platform becomes. Requires a verified Scrolller account.
The T() function constructs HTML from API response fields (t.scrolller_url, t.title, t.subreddit, t.status) and sets it via innerHTML without sanitization. t.scrolller_url is inserted directly into an href attribute with no validation — a javascript: URI or a data: URI from a malicious or compromised Scrolller backend would execute in the extension popup context, bypassing MV3 same-origin restrictions on extension pages. Given the publisher's 100% malicious rate on other extensions, a future backend-side payload delivered through this injection point is a realistic threat model.
function T(t) { let n = document.createElement("div"); n.className = "history-item"; let i = t.status === "completed" ? "completed" : t.status === "duplicate" ? "duplicate" : "pending", e = t.created_at ? new Date(t.created_at) .toLocaleString(void 0, { month: "short", day: "numeric", hour: "2-digit", minute: "2-digit" }) : "", r = t.title ? t.scrolller_url ? `<a class="history-title" href="${t.scrolller_url}" target="_blank">${t.title}</a>` : `<span class="history-title">${t.title}</span>` : '<span class="history-title" style="color:#5a6a7a">Pending...</span>'; return n.innerHTML = ` <div class="history-item-header"> <span class="history-subreddit">r/${t.subreddit}</span> <span class="history-status ${i}">${t.status}</span> </div> ${r} <span class="history-time">${e}</span> `, n}By severity
Versions scanned
None of the 8 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| No versions with multiple unique findings. | |
Files with findings
1 distinct path — top paths by unique finding count:
- popup/popup.js1
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Code Diff
Compare extension code between any two versions.
No comparable text files found between these versions.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.