Security Warning: Historically Flagged as Malware

This extension is historically labeled as malware, but the current version analysis does not yet confirm severe malicious findings.Extension: Sumplus

HIGH RISKStill available - needs review

Sumplus

ID: alhakdfdpecinhmfffjchcmmefaojgbn

Supported Languages

🇲🇽Latin American Spanish

Extension Info & Metadata

Status

Active

Version

2.970

Size

1.33 MB

Rating

3.7/5

Reviews

Users

750

Type

Extension

Updated

Mar 18, 2026

Publisher Contextual Analysis

Author: yuri.rodrixView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

750

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Añade super funcionalidades a la plataforma SUM (Sistema único de matrícula)

Extensión útil para estudiantes de la UNMSM que usan el SUM para armar los horarios de sus cursos, de forma fácil y sencilla

User Growth

Showing data from Mar 11, 2024 to May 24, 2026

Versions

-9.02%(-68 users)

Compared to 3 months ago

6 versions released in this period

Rating Count

Total: 3 ratings

Average Rating

Current: 3.67 / 5.0+3.67

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High0

Medium3

Low3

Versions scanned

Showing 1 of 6 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.1 Code review	6

Extension Version	Code Review Findings
2.1	6

Files with findings

5 distinct paths — top paths by unique finding count:

assets/AppPopUp-x9B4vCY6.js2
assets/app_ScanHorarios-zpkcUqFm.js1
background.js1
manifest.json1
wtf.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	medium	assets/AppPopUp-x9B4vCY6.js (line 54)	Script/CSS paths to inject into the active tab are loaded dynamically from /rutas.json and passed directly into chrome.scripting.executeScript / insertCSS. Although /rutas.json is currently bundled with the extension,…	2.1
2	Privilege Escalation	medium	manifest.json (line 12)	The manifest exposes every extension resource ("*") to every website (<all_urls>). This is overly permissive and enables fingerprinting of the extension from any page plus lets arbitrary sites load internal scripts/HT…	2.1
3	Unauthorized Data Collection	medium	assets/app_ScanHorarios-zpkcUqFm.js (line 12)	Content script fetches the logged-in student's course programming from sum.unmsm.edu.pe using the victim's session cookies and forwards it to the extension's background for storage. Passing includeTlsChannelId:true ad…	2.1
4	Other	low	wtf.js (line 1)	Orphaned script (not referenced in manifest.json) that injects a high-z-index absolutely-positioned div into document.documentElement and registers an onMessage listener. Dead/unreachable code that can inject DOM over…	2.1
5	Tracking	low	assets/AppPopUp-x9B4vCY6.js (line 18)	The popup loads a remote image from a third-party domain (yurirod.vercel.app) controlled by the author, which can be used as a beacon/telemetry signal when the popup is opened. Combined with the dynamic chrome.scripti…	2.1
6	Unauthorized Data Collection	low	background.js (line 35)	The onMessage listener does not validate sender.id or sender.url, so any page that can reach the extension (via externally_connectable or web-accessible content) can cause arbitrary data to be persisted under known st…	2.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/mholt/PapaParse	https://github.com/mholt/PapaParse
www.youtube.com	/watch	https://www.youtube.com/watch?v=L-Aw1G--T8M
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
yurirodrix.vercel.app	-	https://yurirodrix.vercel.app
www.facebook.com	/profile.php	https://www.facebook.com/profile.php?id=61573566683588
www.instagram.com	/confiee_tercio	https://www.instagram.com/confiee_tercio
chromewebstore.google.com	/detail/sumplus/alhakdfdpecinhmfffjchcmmefaojgbn	https://chromewebstore.google.com/detail/sumplus/alhakdfdpecinhmfffjchcmmefaojgbn
github.com	/Yzx7/SumPlus-Extension	https://github.com/Yzx7/SumPlus-Extension
www.instagram.com	/yuri.rodrix	https://www.instagram.com/yuri.rodrix
server.yurirodrix.top	/public/wallets/qr.png	https://server.yurirodrix.top/public/wallets/qr.png

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


13.88.7.71	IPv4	-

5.0 out of 5 · 1 most recent review

Text reviews

Positive

Negative

Sáquenme de aquí

Rildo Gerald Orue Torres·12 Mar 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Warning: Historically Flagged as Malware

Sumplus

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 6 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews