Chrome Web Store
26Versions
1Code reviewed

No malware found

In code review (v3.4.0)

Our reviewer read version 3.4.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

StockGlow by Upstox: Live Stock Prices & Charts, used by 10,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites. It was last updated in September 2026.

Analyst notes

All network requests in and target first-party Upstox endpoints ([domain withheld], [domain withheld]) or Mixpanel, a well-known product analytics SaaS. The declarativeNetRequest rule in spoofs headers exclusively for requests to [domain withheld] — a self-service CORS bypass on Upstox's own API, not third-party traffic interception. Mixpanel event super-properties register Source Domain and Source URL (hostname + pathname), which constitutes the 'Web history' collection explicitly disclosed in the CWS listing; the ML hits for fromCharCode, btoa, XHR, innerHTML, and appendChild are fully explained by the bundled React 19, Mixpanel JS SDK, and TradingView Lightweight Charts library (totalling ~1.2 MB). A referenced in was absent from the extraction bundle, introducing minor residual uncertainty.

StockGlow by Upstox: Live Stock Prices & Charts

StockGlow by Upstox: Live Stock Prices & Charts Chrome extension security report

ID: gedldgbbikhdlaeleapcnlhnilajfmff

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
4.19.0
Size
0.52 MB
Rating
4.3/5
Reviews
14
Users
10,000
Type
Extension
Updated
Sep 28, 2026
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Author
Upstox
Country
IN
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
SUNSHINE TOWER, 30th Floor Senapati Bapat Marg, Dadar Mumbai, Maharashtra 400013 IN
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
10,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
clipboardWrite
Permission
High
This permission allows modification of clipboard content. Rated High because it can inject malicious content into the clipboard, modify copied passwords, and manipulate copied data.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk: • 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.

About this extension

Turn any webpage into a trading terminal. See live prices, charts & trade — without switching tabs.

Read the publisher’s full description

StockGlow by Upstox transforms the way you research and trade stocks online. While reading financial news, blogs, or any webpage, StockGlow automatically detects and highlights every listed stock mentioned on the page — so you never have to hunt for prices again. WHAT IT DOES ✦ Auto-highlights every listed stock on any webpage Stocks glow the moment the page loads. No setup, no clicking — it just works. ✦ Live price & change on hover Hover over any highlighted stock to instantly see its LTP and % change — right there on the page. ✦ Trade without switching tabs Hit Buy or Sell directly from the hover card. StockGlow opens your Upstox order form instantly, pre-filled with the selected stock. ✦ Full TradingView charts, inline Click View Chart to open a full-featured TradingView chart without leaving the page you're reading. ✦ See every stock on the page at once The StockGlow button shows you all stocks mentioned on the current page — tap any to view its chart or trade it instantly. WHO IT'S FOR Active traders and investors who read financial news, market analysis, or research reports while tracking the markets. If you've ever opened 5 tabs just to look up stocks from a single article, StockGlow is built for you. REQUIREMENTS — A free Upstox account (sign up at upstox.com) — Google Chrome browser PRIVACY StockGlow reads page content solely to identify listed stock names. No personal data, browsing history, or financial information is collected or transmitted. It's completely free. Install in 30 seconds.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
4.19.0
Latest
0.52 MBNot scanned—
b40d717c729c7d55cc05150759115d48633415a81a603d040f3f9c0275d06742
4.18.0
0.52 MBNot scanned—
b40d717c729c7d55cc05150759115d48633415a81a603d040f3f9c0275d06742
4.17.0
0.51 MBNot scanned—
2aafc3b1b46afe376898dd705096307704627c998b09a2ed7154ea99b987fd3d
4.15.0
0.51 MBNot scanned—
2aafc3b1b46afe376898dd705096307704627c998b09a2ed7154ea99b987fd3d
4.13.0
0.50 MBNot scanned—
2aafc3b1b46afe376898dd705096307704627c998b09a2ed7154ea99b987fd3d
4.12.0
0.49 MBNot scanned—
2aafc3b1b46afe376898dd705096307704627c998b09a2ed7154ea99b987fd3d
4.11.0
0.49 MBNot scanned—
2aafc3b1b46afe376898dd705096307704627c998b09a2ed7154ea99b987fd3d
4.10.0
0.49 MBNot scanned—
2aafc3b1b46afe376898dd705096307704627c998b09a2ed7154ea99b987fd3d
4.9.0
0.47 MBNot scanned—
2aafc3b1b46afe376898dd705096307704627c998b09a2ed7154ea99b987fd3d
4.8.0
0.46 MBNot scanned—
2aafc3b1b46afe376898dd705096307704627c998b09a2ed7154ea99b987fd3d
Showing 1 to 10 of 30 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.