Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Smart Auto Refresh

CRITICAL RISKRemoved from Chrome Web Store

Smart Auto Refresh

ID: paoemgakkjiejmaceemllabefconpdbg

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

0.34.8

Size

0.65 MB

Rating

4.4/5

Reviews

132

Users

338,354

Type

Extension

Updated

Jan 14, 2021

Publisher Contextual Analysis

Author: Ivona ConstantinView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

338,354

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Select time interval and refresh pages automatically

Smart Auto Refresh allows you to set timer and reload pages periodically. With Smart Auto Refresh, you don’t need to frantically press Ctrl-R if you are waiting for an update. Features: - Set multiple times for multiple tabs - Define custom interval in minutes and seconds - One click disable all the timers - Prevent popups “Do you want to reload this site” on web pages!

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium3

Low3

Versions scanned

Showing 2 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.34.8 Code review	3
0.34.7 Code review	4

Extension Version	Code Review Findings
0.34.8	3
0.34.7	4

Files with findings

3 distinct paths — top paths by unique finding count:

popup/popup.js4
background.js2
content.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	popup/popup.js (line 22)	When the global enable/disable toggle is changed, the extension calls `chrome.tabs.executeScript` with inline code strings injected into every open non-chrome tab simultaneously. While the injected strings only call `…	0.34.7
2	Code Injection	medium	popup/popup.js (line 29)	This iterates across every open tab and injects raw code strings into each non-`chrome://` page with `chrome.tabs.executeScript`. The payload is small, but string-based script injection across all tabs is still a risk…	0.34.8
3	Code Injection	medium	popup/popup.js (line 134)	Tab URLs from all open browser tabs are injected unsanitised directly into `innerHTML` via a template literal. A specially crafted page URL (e.g. a `javascript:` URI or one containing HTML markup) could result in cros…	0.34.7
4	Unauthorized Data Collection	medium	content.js (line 1)	The content script is injected into every HTTP and HTTPS page (`http:///`, `https:///`) and immediately captures `window.location.href` of the current page. The full URL of every page the user visits is used as a …	0.34.7
5	Unauthorized Data Collection	low	popup/popup.js (line 185)	The popup enumerates all open tabs and reads each `tab.url`, giving the extension visibility into the user's broader browsing session rather than just the active tab. That is privacy-sensitive collection behavior, eve…	0.34.8
6	Unauthorized Data Collection	low	background.js (line 6686)	The extension stores full page URLs directly as keys in `chrome.storage.local`. This creates a persistent browsing-history-like map tied to refresh settings; it remains local in the reviewed code, but persisting raw U…	0.34.8
7	Unauthorized Data Collection	low	background.js (line 1)	The background script stores full page URLs as keys in `chrome.storage.local` with no scope limiting or expiry. The message listener accepts `url` and `tabId` values directly from popup messages without validation, me…	0.34.7

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/2000/svg	http://www.w3.org/2000/svg
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	/*	http:///
*	/*	https:///
www.google-analytics.com	-	https://www.google-analytics.com
*.googleapis.com	-	https://*.googleapis.com
www.googletagmanager.com;	-	https://www.googletagmanager.com;
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-

1.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

not working

Vorapod Klinklob·6 Jun 2021

worst not working

Assad Ali·5 Jun 2021

Hijacks your browser and reroutes searches. Report this and do NOT download.

Jared King·27 May 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Smart Auto Refresh

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews