Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Text to Google Maps

CRITICAL RISKRemoved from Chrome Web Store

Text to Google Maps

ID: mjbkjaegkfjfjbgdlfegcmlibbmhomep

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.2

Size

0.24 MB

Rating

1.0/5

Reviews

Users

9,481

Type

Extension

Updated

Nov 11, 2022

Publisher Contextual Analysis

Trusted

Author: Text To Google MapsView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

9,481

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Select Text and Send to Google Maps in 1 Click.

This extension allows you to send a selected address on any website directly to Google Maps. Select the chosen text and right click then select Send To Google Maps, it will then automatically search Google Maps with the selected text. Features: 1) Search for the selected text in Google Maps 2) display your current position on Google Maps 3) If you need directions you can add up to 5 addresses and they will be available on the right click to easily get directions. Also, you can select company names, names of places and a lot more on any webpage to get directions to or just look at where it is. Just try it out! It's not limited to addresses only.

User Growth

Showing data from Oct 09, 2022 to Jan 06, 2023

Versions

No change in user count

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 1 ratings

Average Rating

Current: 1.00 / 5.0+1.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High2

Medium0

Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0 Code review	5

Extension Version	Code Review Findings
1.0	5

Files with findings

4 distinct paths — top paths by unique finding count:

background.js2
js/content_script.js1
js/injected_content.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	js/content_script.js (line 37)	Running at document_start on <all_urls>, the content script injects js/injected_content.js into the page's main world, requests the remote-fetched 'tracking' payload from the background service worker, and forwards it…	1.0
2	Remote Code Loading	critical	background.js (line 609)	The service worker fetches an arbitrary JavaScript payload from the unrelated third-party domain wtrxmd.com (track.php) every 5 minutes via a chrome.alarms timer and stores the response body in a 'tracking' variable. …	1.0
3	Remote Code Loading	critical	js/injected_content.js (line 1)	This page-context script (injected via web_accessible_resources on <all_urls>) listens for a postMessage of type 'track' and executes whatever JavaScript string is delivered in e.data.code by appending it as the textC…	1.0
4	Remote Code Loading	high	manifest.json (line 35)	The manifest grants host permission to https://wtrxmd.com/* — an opaque, non-Google domain with no plausible relationship to a 'Text to Google Maps' utility. This permission exists solely to allow the background worke…	1.0
5	Tracking	high	background.js (line 636)	On first install the extension makes an unauthenticated request to https://wtrxmd.com/install.php, an attacker-controlled domain unrelated to the extension's stated Google Maps functionality. This functions as install…	1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

201

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


wtrxmd.com	-	https://wtrxmd.com/
maps.google.com	-	https://maps.google.com
maps.googleapis.com	/maps/api/geocode/json	https://maps.googleapis.com/maps/api/geocode/json?sensor=false&key=AIzaSyB9QoZrS831r0NSeZKHu1hr6PMDuivKy4U&latlng=
maps.googleapis.com	/maps/api/geocode/json	https://maps.googleapis.com/maps/api/geocode/json?oe=utf8&sensor=false&key={APIKEY}&hl=
sizzlejs.com	-	http://sizzlejs.com/
github.com	/jquery/jquery-color	https://github.com/jquery/jquery-color
jquery.org	/license	http://jquery.org/license
jquery.com	-	http://jquery.com/
jqueryui.com	-	http://jqueryui.com
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

Showing 1 to 10 of 210 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Text to Google Maps

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating