Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Skype Calling

CRITICAL RISKRemoved from Chrome Web Store

Skype Calling

ID: blakpkgjpemejpbmfiglncklihnhjkij

Could be malicious

Supported Languages

🇪🇹Amharic

🇸🇦Arabic

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇱Hebrew

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇮🇳Kannada

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇮🇷Persian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇰🇪Swahili

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

0.0.0.26

Size

0.06 MB

Rating

2.6/5

Reviews

3,858

Users

2,000,000

Type

Extension

Updated

May 12, 2016

Publisher Contextual Analysis

Author: https://skype.comView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

2,000,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Make calls using Skype for Web

Enjoy voice and video calls right from your browser by adding the Skype Calling extension to Chrome.

User Growth

Showing data from Jan 17, 2024 to Jan 15, 2025

Versions

No change in user count

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 3,861 ratings

Average Rating

Current: 2.58 / 5.0+0.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High2

Medium2

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.0.0.26 Code review	6

Extension Version	Code Review Findings
0.0.0.26	6

Files with findings

2 distinct paths — top paths by unique finding count:

extension.js4
content-script.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	critical	extension.js (line 33)	The background script accepts connections from both internal content scripts (`onConnect`) and from any external extension (`onConnectExternal`) using the same handler, with no origin validation. The message dispatche…	0.0.0.26
2	Privilege Escalation	critical	extension.js (line 77)	The native messaging host ID (`message.nmHostId`) originates from the web page and passes through the content script untrusted to the background script, which calls `chrome.extension.connectNative(message.nmHostId)` w…	0.0.0.26
3	Data Exfiltration	high	extension.js (line 125)	Arbitrary message content from the web page is relayed directly to the native messaging host with minimal validation — the only check is a URL whitelist for `openWindow` operations. All other message types pass throug…	0.0.0.26
4	Privilege Escalation	high	content-script.js (line 60)	The `extensionId` used in `chrome.runtime.connect()` is entirely controlled by the web page via a `postMessage` event. Any page on the whitelisted origins (live.com, outlook.com, skype.com) can instruct this content s…	0.0.0.26
5	Data Exfiltration	medium	content-script.js (line 5)	The content script broadcasts all messages to the page using `"*"` as the targetOrigin, meaning any origin — including malicious cross-origin iframes or other pages — can receive messages forwarded from the native hos…	0.0.0.26
6	Unauthorized Data Collection	medium	extension.js (line 143)	Web pages on whitelisted origins (or any external extension via `onConnectExternal`) can read and write arbitrary key-value data to the extension's local storage by sending `StoreIntoExtension` and `LoadFromExtension`…	0.0.0.26

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/tiff/1.0/	http://ns.adobe.com/tiff/1.0/

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


0.0.0.26	IPv4	-

3.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Я бы поставил и больше, но здесь нель��я пополнять счёт. По-моему единственная услуга, которая работает без ежемесячной оплаты при звонках на телефонные номера.

Piotr Urbanowski·26 Sept 2024

Я бы поставил и больше, но здесь нельзя пополнять счёт. По-моему единственная услуга, которая работает без ежемесячной оплаты при звонках на телефонные номера.

Piotr Urbanowski·26 Sept 2024

We invite you to join us in our partnership to expand your revenue and grow your chrome extension. Let's explore how we can help you. Learn more at: https://extensionbuysell.com Looking forward to working with you!

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Skype Calling

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating