Security Warning: High Security Risk

Automated analysis found severe security findings in this version. Review the Security Analysis tab before trusting this extension.Extension: The Weather Tab

HIGH RISK

The Weather Tab

ID: ibjlpamfjpabhjkdabmejfdobmlbilkf

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

1.5.3

Size

5.98 MB

Rating

3.0/5

Reviews

Users

10,000

Type

Extension

Updated

Sep 14, 2022

Publisher Contextual Analysis

Trusted

Author: Eaglizer LLCView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

10,002

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

The Weather Tab is a Chrome Extension for the New Tab

Stay up to date on the weather in your area directly from you new tab. This extension changes your existing new tab page and changing the search engine in the new tab to Bing and provides the features below: - Clean new tab look - Weather information for your current location - Changing weather backgrounds - Links to popular sites - Convenient web search powered by Bing.com search results. With it, you can easily search for your favorite topics, images, videos, and news This extension is free to download from the Chrome Web store, and you can uninstall it at any time. By installing and using The Weather Tab you agree to the Terms of Use and Privacy Policy. Please review our Privacy Policy for details regarding the information we collect when you install and use the extension. For more information please check: - About Us https://the-weather-tab.com/about Terms of Service: https://the-weather-tab.com/terms Privacy Policy: https://eaglizer.co/privacy.html

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 0 ratings

Average Rating

Current: 0.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium2

Low1

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.5.3 Code review	6

Extension Version	Code Review Findings
1.5.3	6

Files with findings

3 distinct paths — top paths by unique finding count:

scripts/background.js3
newtab.html2
scripts/main.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Tracking	high	scripts/background.js (line 3)	The extension generates a persistent 256-bit unique identifier (UID) on first run and stores it in chrome.storage.local. On install, this UID is immediately transmitted to the developer's server via `http://the-weathe…	1.5.3
2	Unauthorized Data Collection	high	scripts/background.js (line 33)	On installation, the extension opens a new tab sending the generated UID as a URL query parameter to an unencrypted HTTP endpoint (`http://`, not HTTPS). This transmits the persistent tracking identifier in plaintext …	1.5.3
3	Unauthorized Data Collection	high	newtab.html (line 41)	The search bar on the new tab page submits queries to `https://the-weather-tab.com` via the `q` parameter rather than to any legitimate search engine. Every search term typed by the user is sent to the extension devel…	1.5.3
4	Unauthorized Data Collection	medium	scripts/background.js (line 44)	The background service worker exposes the persistent tracking UID to any caller that sends a message with `req.prop === 'uid'`. In Manifest V3 this listener is accessible from the extension's own pages; combined with …	1.5.3
5	Unauthorized Data Collection	medium	scripts/main.js (line 100)	The OpenWeatherMap API key (`5f1f556e19d2cc3d6ccb8b3b9a16a25c`) is hardcoded in plaintext in the extension source. While this is the developer's own key, embedding credentials in client-side code exposes them to any u…	1.5.3
6	Tracking	low	newtab.html (line 20)	Every time a user opens a new tab, the browser makes a network request to Google's font CDN, leaking the user's IP address and browser fingerprint to Google. For a new tab extension that fires on every new tab open, t…	1.5.3

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


fontawesome.io	-	http://fontawesome.io
fontawesome.io	/license	http://fontawesome.io/license
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
fonts.googleapis.com	/css	https://fonts.googleapis.com/css?family=Roboto:300,400,500,700&display=swap
the-weather-tab.com	-	https://the-weather-tab.com
www.gmail.com	-	https://www.gmail.com
www.facebook.com	-	https://www.facebook.com
www.youtube.com	-	https://www.youtube.com

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.3 out of 5 · 3 most recent reviews

Text reviews

Positive

Negative

Nice tab with time and date. But no weather info, which is a major drawback for a weather tab. lol. still got two stars though for its clean look.

James F. Dobrow·22 Apr 2026

Alright i know that you had to advertising but this is not okay why you have to advertising when im downloading stuff why you can't just made a amazing extension like the feature that google removes it and when you want to advertising to get downloads just ask a youtuber to sponser it I know i know it youtuber maybe dosen't accept but just try it And dont even think about scamming the youtuber if they know it you they maybe download this extension and post the rating like this and deleted the extension like what im doing know and maybe they'll report you unti the extension deleted

Ken·26 Jun 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Warning: High Security Risk

The Weather Tab

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating