Simple Notepad

Simple Notepad

ID: nldebakbjbmjaikgkbpladlpjlefomap

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.2
Size
0.01 MB
Rating
5.0/5
Reviews
1
Users
63
Type
Extension
Updated
Jul 14, 2018
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Unlisted
Mature
No
By Google
No
Trusted
Yes

Publisher Contextual Analysis

Trusted
Author
ishootbwView Profile
Country
USA
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
11923 NE Sumner St STE 690937 Portland, Oregon 97220 USA
Total Extensions
2
Active
1
Obsolete
1
Listed
1
Unlisted
1
Total Users
74
Screenshot 1

Opens multiple Tabs to take some notes or copy your clipboard inside, simple and easy to use.

Simple Notepad saves any plain text quickly and fast with no frills. Just insert your text manually or from your clipboard and here you go. - No unneeded stuff - Saves up to 4 Tabs - Fast and plain - Nice dark theme - converts your html text to plain

Item
Type
Severity
Description
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2

A `hello()` function opens a WhatsApp URL assembled from DOM inputs and then calls `chrome.tabs.executeScript({file:'alert.js'})`. Neither `alert.js` nor the form inputs (`number`, `ccode`) referenced here exist in the bundle or popup.html — this function is entirely orphaned/dead code. While it cannot execute at runtime (missing file, no trigger, missing DOM elements), its presence in a simple notepad extension is unexplained and suggests the extension was derived from unrelated code. The `chrome.tabs.executeScript` call without `tabId` would attempt to inject into the active tab, which is a privilege the extension does not appear to legitimately need.

popup.js (Line 1)
function hello() {  var word = document.getElementById("number")    .value;  var country = document.getElementById("ccode")    .value;  word = parseInt(word);  chrome.windows.create({    url: 'https://api.whatsapp.com/send?phone=' + country + word,    type: 'panel'  });  chrome.tabs.executeScript({    file: 'alert.js'  });}

By severity

Critical0
High0
Medium1
Low0

Versions scanned

None of the 1 scanned version has more than one unique code-review finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path — top paths by unique finding count:

  • popup.js1
S.No.
Category
Severity
File
Summary
Found in Version
1Other
medium
popup.js (line 1)A `hello()` function opens a WhatsApp URL assembled from DOM inputs and then calls `chrome.tabs.executeScript({file:'alert.js'})`. Neither `alert.js` nor the form inputs (`number`, `ccode`) referenced here exist in th…
URLs
4
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

weloveiconfonts.com/api/http://weloveiconfonts.com/api/?family=fontawesome
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
fonts.googleapis.com/csshttps://fonts.googleapis.com/css?family=Open+Sans:400,700
api.whatsapp.com/sendhttps://api.whatsapp.com/send?phone=

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
1.2
Latest
0.01 MB
Benign
1
Showing 1 to 1 of 10 rows
Rows per page:

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.