Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Soul++

CRITICAL RISKRemoved from Chrome Web Store

Soul++

ID: bleoonmhjmcnoflcfnlgfondalejbacp

Could be malicious

Supported Languages

🇨🇳Chinese (Simplified)

Extension Info & Metadata

Status

Removed

Version

1.0.7

Size

0.52 MB

Rating

4.9/5

Reviews

Users

5,000

Type

Extension

Updated

Mar 3, 2023

Publisher Contextual Analysis

Author: tylerdurdenchyView Profile
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

5,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

提升魂+论坛的使用体验

为解决魂+论坛使用体验痛点而生的开源插件安装后将可使用以下功能 ## 功能 - 免刷新 - [X] 购买免刷新 - [X] 回复免刷新 - 无缝加载 - [X] 无缝加载板块帖子列表 - [X] 无缝加载贴内楼层列表 - [X] 无缝加载搜索页结果 - [X] 无缝加载图墙模式帖子 - [X] 无缝加载用户资料帖子 - SFW 安全模式 - [X] 折叠贴内图片 - [X] 按需加载图片 - [X] 替换用户头像 - [X] 折叠版块公告大图 - 其它 - [X] 暗黑模式 - [X] 开启Mark++ - [X] 自动领取和完成论坛任务 - [X] 标记已阅读过的帖子 - [X] 给[回复第X楼/引用第X楼]增加跳转到该楼层的链接 - [X] 折叠网赚区搜索结果 - [X] 百度网盘链接失效检测 - [X] 编辑器下方增加外部图床 [ 可通过拖放/选取/粘贴 3种方式上传 ] - [X] 默认勾选"新回复站内通知 - [X] 域名跳转 - [X] 强制使用桌面版 - 页面增强 - 在[点击进入图墙模式]旁边增加了"在该版块默认打开图墙模式"复选框

User Growth

Showing data from Apr 20, 2022 to Apr 19, 2023

Versions

-1.52%(-77 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 18 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium2

Low1

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.6 Code review	6

Extension Version	Code Review Findings
1.0.6	6

Files with findings

2 distinct paths — top paths by unique finding count:

js/content_script.js5
js/background.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	high	js/content_script.js (line 6573)	The extension first scrapes a CSRF/auth token from freeimage.host's homepage (via the background CORS proxy), then uploads user-selected images as base64-encoded data to `https://freeimage.host/json` — a third-party i…	1.0.6
2	Network Interception	high	js/background.js (line 2627)	The background service worker acts as a general-purpose CORS proxy: any URL can be fetched by sending a `request_cors` message from the content script, and any multipart form payload can be POSTed by sending `upload_i…	1.0.6
3	Unauthorized Data Collection	high	js/content_script.js (line 5549)	The extension includes a fully automated 'task bot' that, once per hour, silently fetches the forum's task list, extracts task IDs and server-side verify hashes, and fires authenticated requests to `/plugin.php?H_name…	1.0.6
4	Unauthorized Data Collection	medium	js/content_script.js (line 4344)	For every Baidu Cloud (pan.baidu.com) link found on a forum page, the extension routes an authenticated fetch through the background service worker's CORS proxy to check whether the link is still live. The background'…	1.0.6
5	Unauthorized Data Collection	medium	js/content_script.js (line 6125)	The extension reads all hidden and visible form input fields (`form .f_one input`) from the reply form, bundles them into a data object (including CSRF tokens, form action parameters, and thread identifiers), and POST…	1.0.6
6	Tracking	low	js/content_script.js (line 5578)	The task bot extracts the authenticated user's numeric UID and display name from the page DOM on every page load, then stores them in `chrome.storage.sync` keyed by UID to track per-user execution timestamps. This sil…	1.0.6

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


json-schema.org	/draft-07/schema	http://json-schema.org/draft-07/schema#
github.com	/dicebear/dicebear	https://github.com/dicebear/dicebear
creativecommons.org	/publicdomain/zero/1.0/	https://creativecommons.org/publicdomain/zero/1.0/
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
creativecommons.org	/ns	http://creativecommons.org/ns#
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
purl.org	/dc/dcmitype/StillImage	http://purl.org/dc/dcmitype/StillImage
creativecommons.org	/ns	https://creativecommons.org/ns#
pan.baidu.com	-	https://pan.baidu.com

Showing 1 to 10 of 50 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.2.3.4	IPv4	-
36.36.86.58	IPv4	-
1.41.58.55	IPv4	-
15.27.21.43	IPv4	-
36.28.75.51	IPv4	-
16.18.29.35	IPv4	-
1.17.13.28	IPv4	-
23.18.48.33	IPv4	-
11.11.19.22	IPv4	-
1:2:3:4:5:6:7:8	IPv6	-

4.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

折叠贴内图片功能一旦开启，展开的图片会强制适配外部盒子的宽度，而不是保持原始图片的尺寸，这会导致小图片——主要是表情的放大，希望能修改下。

至

至尊黄金特别版等于号·27 Jan 2024

折叠贴内图片功能一旦开启，展开的��片会强制适配外部盒子的��度��而不是保持原��图片的尺��，这会导致小图片——主要是表情的放大，希望能修改下。

至

至尊黄金特别版等于号·27 Jan 2024

折叠贴内图片功能一旦开启，展开的图片会强制适配外部盒子的宽度��而不是保持原始图片的尺��，这会导致小图片——主要是表情的放大，希望能修改下。

至

至尊黄金特别版等于号·27 Jan 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Soul++

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating