Extension Auditor
Extension Auditor
Sign Up

Spilled

ID: eemcjnefigpbpofkmbidicimickmokch

Could be malicious

Extension Info & Metadata

Status
Removed
Version
0.1
Size
0.03 MB
Rating
0.0/5
Reviews
0
Users
1
Type
Extension
Updated
May 21, 2019
Category
11_web_development
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Author
vuln.oneView Profile
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
1

Detects exploitable storage of private info in cookies

Detects exploitable storage of private info in cookies

Item
Type
Severity
Description
<all_urls>
Permission
Critical
This permission grants access to all websites without restriction. Rated High because it can access any web content, monitor all web activity, and potentially steal sensitive data across all sites.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
URLs
7
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
github.com/PrinsFrank/Spilledhttps://github.com/PrinsFrank/Spilled
developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/user_interface/Browser_styleshttps://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/user_interface/Browser_styles
discourse.mozilla.org/t/using-es6-modules-in-background-scripts/29911/2--https://discourse.mozilla.org/t/using-es6-modules-in-background-scripts/29911/2--
fsf.org-http://fsf.org/
www.gnu.org/licenses/http://www.gnu.org/licenses/
www.gnu.org/philosophy/why-not-lgpl.htmlhttp://www.gnu.org/philosophy/why-not-lgpl.html

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
0.1
Latest
0.03 MB
Malicious
—
9f48321432c52de96c2af1a59e6b22d24919d853dca5fa448528c04ab478cfcd
Showing 1 to 1 of 10 rows
Rows per page:

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In