Extension Auditor
Extension Auditor
Sign Up
Sharks Tab

Sharks Tab

ID: bdolbdfkcfcmlandhadponlpfbdjlnga

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.0.1
Size
0.07 MB
Rating
0.0/5
Reviews
0
Users
114
Type
Extension
Updated
Sep 2, 2023
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
RiseOn Media Ltd.View Profile
Privacy
Privacy Policy
Help
Help Center
Country
IL
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Address
Nahalat Binyamin St 52 Tel Aviv-Yafo 6515402 IL
Website
Visit
Total Extensions
4
Active
1
Obsolete
3
Listed
4
Unlisted
0
Total Users
117
Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

SharksTab Chrome extension is designed to bring beautiful images of a variety of sharks species to your browser's new tab.

SharkTab brings beautiful images of a variety of sharks species to your browser’s new tab. Once installed you can choose your preferred background from one of the many images in its image library. By clicking "Add to chrome", you accept and agree to installing SharksTab extension and setting Chrome New Tab search to that provided by the service. The search will be powered by Microsoft Bing. Homepage - https://www.sharkstab.com/ Terms of Use - https://sharkstab.com/tos Privacy Policy - https://www.sharkstab.com/privacy-policy Support - https://www.sharkstab.com/contact Credits: Flaticon - https://www.flaticon.com/free-icon/shark_3388064 Images - https://unsplash.com/

Item
Type
Severity
Description
*://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
topSites
Permission
High
This permission accesses the list of most visited websites. Rated High because it can reveal browsing patterns, identify frequently accessed service, and gather user behavior data.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.

The bundled manifest declares `tabs` permission and `host_permissions: ["*://*/*"]`, but the live CWS listing only discloses `["storage", "topSites"]` with no host_permissions. Under-declaring permissions to the Chrome Web Store while bundling broader ones is a known technique used by publisher-upgrade malware (clean initial version, malicious update). Given that this publisher's other 3 extensions are all flagged malicious, the discrepancy cannot be dismissed as a CWS display quirk.

manifest.json (Line 1)
{  "manifest_version": 3,  "permissions": [    "storage",    "tabs",    "topSites"  ],  "host_permissions": [    "*://*/*"  ]}

By severity

Critical0
High1
Medium0
Low0

Versions scanned

None of the 5 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path — top paths by unique finding count:

  • manifest.json1
S.No.
Category
Severity
File
Summary
Found in Version
1Other
high
manifest.json (line 1)The bundled manifest declares `tabs` permission and `host_permissions: ["*://*/*"]`, but the live CWS listing only discloses `["storage", "topSites"]` with no host_permissions. Under-declaring permissions to the Chrom…
1.0.1
URLs
70
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
www.sharkstab.com-https://www.sharkstab.com/
www.sharkstab.com/contact-us/https://www.sharkstab.com/contact-us/
www.sharkstab.com/eula/https://www.sharkstab.com/eula/
www.sharkstab.com/privacy-policy/https://www.sharkstab.com/privacy-policy/
unsplash.com/photos/WUeTcQqYQGwhttps://unsplash.com/photos/WUeTcQqYQGw
images.unsplash.com/photo-1637308113593-02fd03f6f92chttps://images.unsplash.com/photo-1637308113593-02fd03f6f92c?ixlib=rb-4.0.3&ixid=MnwxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8&auto=format&fit=crop&w=1632&q=80
unsplash.com/@wolfalexshttps://unsplash.com/@wolfalexs
unsplash.com/photos/GBDkr3k96DEhttps://unsplash.com/photos/GBDkr3k96DE
images.unsplash.com/photo-1560275619-4662e36fa65chttps://images.unsplash.com/photo-1560275619-4662e36fa65c?ixlib=rb-4.0.3&ixid=MnwxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8&auto=format&fit=crop&w=1500&q=80
unsplash.com/@geeraldhttps://unsplash.com/@geerald
Showing 1 to 10 of 70 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Showing 1 to 5 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In