Chrome Web StoreCaution required
Suspicious in code review (v1.3.9)
Our reviewer found behaviour consistent with malware in version 1.3.9, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
10 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Search and Replace, used by 60,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can read and change data on all websites and can inject scripts into pages.
Key findings
- High
Other
Bundled manifest uses manifest_version 2 and includes 'tabs' permission, while the published manifest summary shows manifest_version 3, with permissions ["activeTab", "storage", "notifications"] and host_permissions. The added 'notifications' permission is not used in the bundled code. This discrepancy suggests the live extension may have been updated to a different configuration, possibly introducing risk.
Analyst notes
The source code implements the described search-and-replace functionality without any data exfiltration or malicious behavior. However, the bundled (manifest_version 2, tabs permission) significantly differs from the published manifest (manifest_version 3, activeTab, storage, notifications). This mismatch suggests the live extension may differ from the reviewed version, which raises suspicion of a delayed-malicious update or configuration error.
Search and Replace Chrome extension security report
ID: bldchfkhmnkoimaciljpilanilmbnofo
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Chris Taylor
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
10 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Search for text on a webpage and replace it with different text.
Read the publisher’s full description
Allows you to search for text anywhere on the page and replace it with different text. For example: - edit text in editors in WordPress, Drupal, Notion, Etsy, eBay, Amazon +more! - quickly correct forms in which the wrong information has been entered multiple times - edit the HTML of the page - use regular expressions as a search term - edit hidden fields - apply matches from the regular expressions search term as part of the replacement - save the search and replace instance and apply to all subsequent page visits - match pages by regular expressions to apply one rule to many different web pages Please Note: 1. You must refresh the page or restart chrome before using. 2. The popup will not stay open if you click elsewhere. This is a feature of Chrome. View a video of it in action here: http://www.youtube.com/watch?v=tf0D8RUdwkI
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
10 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
Popular in Workflow & Planning
- Adobe Acrobat: PDF edit, convert, sign tools344,000,000 users
- Application Launcher For Drive (by Google)99,000,000 users
- AdBlock — block ads across the web65,000,000 users
- Chrome Remote Desktop41,000,000 users
- Adblock Plus - free ad blocker40,000,000 users