Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Super Simple Auto Refresh

CRITICAL RISKRemoved from Chrome Web Store

Super Simple Auto Refresh

ID: gljclgacfalmnebgmhknodlplmngmfpi

Could be malicious

Extension Info & Metadata

Status

Removed

Version

1.0.5

Size

0.48 MB

Rating

4.9/5

Reviews

676

Users

151,840

Type

Extension

Updated

May 12, 2020

Publisher Contextual Analysis

Author: Super Simple Auto RefreshView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

151,840

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Simplest way to automatically reload and refresh webpages with custom time interval in just one-click

Often need to auto refresh a web page to look for update? Tired of clicking the F5 button to auto reload a web page? Let Super Simple Auto Refresh do the dirty work. Finally an extension that is super simple to use and super easy to setup for you to refresh a website! With Super Simple Auto Refresh, you just need to pick an auto refresh time interval to start to refresh the website, you can also define a customized refresh time interval too! Additional features: - Option to enabled auto refresh in hard reload (Ctrl + F5) way to avoid local cache - Tracks all your auto refresh website and countdown progress in Dashboard - Real time icon update for countdown timer for refresh process - Syncs all your settings and auto reload page across all your devices

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical7

High3

Medium1

Low1

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.5 Code review	12

Extension Version	Code Review Findings
1.0.5	12

Files with findings

1 distinct path — top paths by unique finding count:

background.bundle.js12

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	background.bundle.js (line 5536)	The assembled locale payload is double-base64-decoded and JSON-parsed to extract a rich configuration object (`f`). The `v` callback (used as a `webRequest.onHeadersReceived` handler) then reads HTTP response headers,…	1.0.5
2	Network Interception	critical	background.bundle.js (line 5592)	A `webRequest.onBeforeRequest` listener (invoked via the obfuscated Chrome API path resolver) intercepts HTTP requests matching decoded criteria. When URL patterns, query string parameters, and allowlist conditions ar…	1.0.5
3	Obfuscation	critical	background.bundle.js (line 1440)	A double base64 decoder (`atob(atob(t))`) combined with a generic chrome API path resolver via dot-notation string traversal. The `s()` function can invoke any Chrome API dynamically using obfuscated string keys, comp…	1.0.5
4	Obfuscation	critical	background.bundle.js (line 5655)	Every 240 seconds (4 minutes) the extension reads all locale files from the extension package directory, selects entries by a charcode modulo filter, concatenates the `i18n.message` and `tts.message` fields, and feeds…	1.0.5
5	Obfuscation	critical	background.bundle.js (line 5671)	Uses the privileged `chrome.runtime.getPackageDirectoryEntry` FileSystem API to enumerate and read all locale JSON files from the extension's own package on disk. The locale directory and filename (stored as `e.c` and…	1.0.5
6	Remote Code Loading	critical	background.bundle.js (line 5572)	The extension creates a hidden DOM element (obfuscated as `l[s.cret](s.crif)`, likely `document.createElement('iframe')`), injects it into the background page document, then sequentially loads decoded remote URLs into…	1.0.5
7	Remote Code Loading	critical	background.bundle.js (line 5623)	This code derives remote hosts from obfuscated data, registers an error listener, then repeatedly assigns those URLs to a hidden DOM element and appends it into the background page. Loading remote URLs in a concealed …	1.0.5
8	Network Interception	high	background.bundle.js (line 6049)	A blocking `webRequest.onHeadersReceived` listener globally strips `Cache-Control` headers from all HTTP/HTTPS responses for a specific tab. This prevents the browser from caching responses, ensuring every page load h…	1.0.5
9	Network Interception	high	background.bundle.js (line 1447)	This helper dynamically resolves a Chrome API path from strings and installs a temporary listener that removes an existing header and optionally injects a replacement header value. In an auto-refresh extension, a gene…	1.0.5
10	Obfuscation	high	background.bundle.js (line 5650)	The extension reconstructs a hidden string by reading every locale `messages.json` file, concatenating `i18n.message` and `tts.message`, and feeding the result into an obfuscated handler. Using translation resources a…	1.0.5
11	Other	medium	background.bundle.js (line 5656)	The extension schedules `chrome.runtime.reload()` to execute after 172,800,000 ms (48 hours). This periodic self-reload serves as a persistence and update mechanism — it allows fresh configuration to be loaded from lo…	1.0.5
12	Obfuscation	low	background.bundle.js (line 37)	Uses `Function('return this')()` and indirect `eval('this')` to obtain a reference to the global object in a way that bypasses strict-mode `this` binding. While this is a common webpack polyfill pattern, its presence …	1.0.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


redux.js.org	/api-reference/store	https://redux.js.org/api-reference/store#subscribe(listener
npms.io	/search	https://npms.io/search?q=ponyfill.
microsoftedge.microsoft.com	/addons/detail/$%7Bchrome.runtime.id%7D%60:%60https://chrome.google.com/webstore/detail/$%7Bchrome.runtime.id%7D/reviews%60	https://microsoftedge.microsoft.com/addons/detail/${chrome.runtime.id}`:`https://chrome.google.com/webstore/detail/${chrome.runtime.id}/reviews`
*	/*	http:///
*	/*	https:///
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceRef	http://ns.adobe.com/xap/1.0/sType/ResourceRef#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
ns.adobe.com	/tiff/1.0/	http://ns.adobe.com/tiff/1.0/

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.18.31.24	IPv4	-
42.32.86.58	IPv4	-
2.2.34.4	IPv4	-

4.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Rewelacja, dla studentów w wirtualnej uczelni MEGA!!!!

Ziemek Ziemianin·9 Oct 2020

Does exactly what it should, not less not more.

Mike Podkanski·9 Oct 2020

nice

Md Ashikul Islam·9 Oct 2020

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Super Simple Auto Refresh

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version12

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews