Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Temp Mail - Temporary Email Address

CRITICAL RISKRemoved from Chrome Web Store

Temp Mail - Temporary Email Address

ID: gmindkhkpdfcjjeiffmhpbpcjjfbamph

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.0.3

Size

0.12 MB

Rating

1.8/5

Reviews

Users

4,000

Type

Extension

Updated

Dec 20, 2022

Publisher Contextual Analysis

Trusted

Author: adzdeveloperView Profile
Help: Help Center
Country: AU
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: 14 Farmaner Pkwy Ellenbrook, WA 6069 AU

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

4,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Best Temp Mail address to prevent from email hacking and spamming

A disposable email address service prevents your email from spam, promotional emails, bots, and hacking attacks with the help of a temp mail chrome extension. In addition, we allow receiving the file attachments in the temp mailbox. Temp-mail extension provides an anonymous and free temporary email address. Keep your original mailbox secure and avoid spam emails with temp-mail exclusive Chrome extension features, unlike other service providers.

User Growth

Showing data from Dec 17, 2022 to Dec 16, 2023

Versions

+33.33%(+1,000 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 0 ratings

Average Rating

Current: 0.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High3

Medium2

Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.2 Code review	6

Extension Version	Code Review Findings
1.0.2	6

Files with findings

4 distinct paths — top paths by unique finding count:

content-script.js2
popup.js2
background.html1
popup.html1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	popup.html (line 16)	The Content Security Policy permits scripts from any HTTP origin (`http://*`), inline scripts (`unsafe-inline`), and dynamic code execution (`unsafe-eval`). This completely defeats CSP protections, allowing any HTTP-s…	1.0.2
2	Data Exfiltration	high	popup.js (line 197)	On every popup open, `getEmailcount()` decodes the user's temporary email address from localStorage and transmits it in plaintext as a query parameter to the operator's API endpoint. This call runs immediately and the…	1.0.2
3	Tracking	high	content-script.js (line 13)	When autofill is enabled, the content script runs on every page (`http:///`, `https:///`) and injects an `<img>` element loaded from the remote operator server into every email input field. This functions as a tra…	1.0.2
4	Unauthorized Data Collection	high	content-script.js (line 33)	The content script retrieves the stored temporary email address (base64-decoded via `atob`) from synced storage and silently auto-fills it into email input fields on all websites. The use of `atob()` for storage is a …	1.0.2
5	Obfuscation	medium	background.html (line 1)	The manifest declares `event.js` as the MV3 service worker, but `background.html` references a `background.js` file that is not present in the extension package. This orphaned HTML page with a missing script reference…	1.0.2
6	Unauthorized Data Collection	medium	popup.js (line 12)	On every popup open, the extension queries the active tab URL and extracts the hostname, then stores user-curated domain exceptions in `chrome.storage.sync` (which syncs across devices via the user's Google account). …	1.0.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/carhartl/jquery-cookie	https://github.com/carhartl/jquery-cookie
www.d-project.com	-	http://www.d-project.com/
jeromeetienne.github.com	/jquery-qrcode/	http://jeromeetienne.github.com/jquery-qrcode/
www.opensource.org	/licenses/mit-license.php	http://www.opensource.org/licenses/mit-license.php
www.denso-wave.com	/qrcode/faqpatent-e.html	http://www.denso-wave.com/qrcode/faqpatent-e.html
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/2000/xmlns/	http://www.w3.org/2000/xmlns/
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
code.google.com	/p/android/issues/detail	http://code.google.com/p/android/issues/detail?id=5141
jindo.dev.naver.com	/collie	http://jindo.dev.naver.com/collie

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

1.0 out of 5 · 4 most recent reviews

Text reviews

Positive

Negative

Didn't generate the email.. only ***@***.com

Gabriele Brancato·3 Jun 2024

One of the worst extension which doesn't open.

Aamir Ishfaq·3 May 2024

Doesn't work. It gave me ***@***.com, so when I pressed the "change" button it wouldn't change or do anything.

Sylvia Anne Shealy

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Temp Mail - Temporary Email Address

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating