Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Stelo

CRITICAL RISKRemoved from Chrome Web Store

Stelo

ID: mbkkeapdhlpaoackmgdnbgiiiigbibob

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

2.0.8

Size

0.58 MB

Rating

4.9/5

Reviews

Users

9,127

Type

Extension

Updated

Oct 16, 2023

Publisher Contextual Analysis

Author: http://stelolabs.comView Profile
Privacy: Privacy Policy
Country: US
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: 340 S Lemon Ave #6983 Walnut, CA 91789 US

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

9,127

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Stelo secures crypto transactions so you can explore web3 with confidence. Stelo simulates every transaction before it reaches…

Stelo secures crypto transactions so you can explore web3 with confidence. Stelo simulates every transaction before it reaches your wallet and explains what's happening in plain English. Whether you’re on swapping on Uniswap, listing on OpenSea, or minting the next big thing, Stelo makes it easy to understand if what you're doing is safe. Stelo never has access to your seed phrase or private key which means we can never move your assets. By installing Stelo you agree to our privacy policy (https://stelolabs.com/privacy) and Terms of Service (https://stelolabs.com/terms).

User Growth

Showing data from Sep 13, 2022 to Sep 12, 2023

Versions

-10.82%(-1,107 users)

Compared to 3 months ago

15 versions released in this period

Rating Count

Total: 30 ratings

Average Rating

Current: 4.90 / 5.0-0.10

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High0

Medium2

Low1

Versions scanned

Showing 1 of 16 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.11 Code review	3

Extension Version	Code Review Findings
1.0.11	3

Files with findings

2 distinct paths — top paths by unique finding count:

assets/injectedScript.89fea5f7.js2
assets/injector.ts.e2f80a5e.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	medium	assets/injector.ts.e2f80a5e.js (line 1)	Content script (running at document_start across all http(s) frames) injects a script tag pointing at a packaged extension resource into every page's DOM. This DOM-injection pattern combined with all_frames + document…	1.0.11
2	Network Interception	medium	assets/injectedScript.89fea5f7.js (line 10)	The injected script monkey-patches window.ethereum.send, sendAsync and request to intercept Web3 wallet RPC calls before they reach the user's wallet (MetaMask, etc.). While Stelo's stated purpose is transaction-safet…	1.0.11
3	Unauthorized Data Collection	low	assets/injectedScript.89fea5f7.js (line 66)	Reads window.ethereum.selectedAddress (the connected crypto wallet address) along with full JSON-RPC method/params and forwards them through a CustomEvent into the content-script -> service-worker pipeline. While limi…	1.0.11

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	/*	http:///
*	/*	https:///
etherscan.io	/*	http://etherscan.io/*
etherscan.io	/*	https://etherscan.io/*
stelo.com	/contract/	https://stelo.com/contract/
stelo.com	/txn/	https://stelo.com/txn/
etherscan.io	/tx/	https://etherscan.io/tx/
etherscan.io	/address/	https://etherscan.io/address/
etherscan.io	/token/	https://etherscan.io/token/

Showing 1 to 10 of 60 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.7 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

So nice. I believe that most of crypto users will use it one day. Thanks.

dennis gan·20 Feb 2023

Scan with Metamask app to connect my wallet and nothing happens

Bill Hagerty·3 Feb 2023

Hey folks, if you're into the NFT and crypto space, you need to check out Stelo. It's like having a superhero sidekick that helps protect you from phishing scams. It sits in between your Dapps and wallets, like MetaMask and Coinbase Wallet, and gives you all the important details about a transaction before it even hits the blockchain. Plus, Stelo will never have access to your seed phrase or private key, so you can rest easy knowing your assets are safe and sound. And the best part is, it's open-source and available on Github, which means you can always see what's going on under the hood. I highly recommend giving Stelo a try - it's a game changer!

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Stelo

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 16 Versions3

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating