Chrome Web StoreCaution required
Suspicious in code review
Our reviewer found behaviour consistent with malware, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
1 critical finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Top Best Extension, used by 6,000 people, is rated caution by Extension Auditor. Our code review reported 3 findings (1 critical, 2 high), led by privilege escalation. It comes from a trusted publisher and was last updated in November 2026.
Key findings
- Critical
Privilege Escalation
After reporting each URL visit to the server, the extension unconditionally follows server instructions to open new tabs to any URL the server returns. The 'bg' mode opens the tab hidden from the user (active:false, pinned at index 0) and auto-closes it after a configurable timeout — consistent with silent ad-impression fraud. The 'fg' mode hijacks the foreground. No user consent or scoping to declared host_permissions applies; the target URL is fully controlled by the remote server at [domain withheld], whose publisher email is @[domain withheld] (ad-network operator). This is a classic C2 tab-injection adware pattern.
- High
Tracking
On every top-frame browser navigation the full destination URL is sent to [domain withheld] together with the user's persistent UUID (appended by the I() helper, line 480) and the current open-tab count. CWS-disclosed data collection is 'none', so this constitutes undisclosed comprehensive browsing-history exfiltration. The endpoint is the publisher's own domain, but the data category is entirely outside the CWS disclosure, satisfying the finding threshold under rule 7e(ii).
- High
Other
The bundled manifest declares the 'search' permission, which grants access to the browser's search-provider configuration. The published CWS manifest (from the live store listing) omits 'search' entirely. This undeclared permission discrepancy indicates either a post-review modification to the installed package or a capability intentionally hidden from the CWS reviewer, and is itself a high-severity finding per the analysis instructions.
Analyst notes
implements a server-controlled tab-injection C2 loop (lines 1230–1267): every top-frame navigation fires a request to [domain withheld] carrying the full URL, the user's persistent UUID, and open-tab count; the server may respond with a 'bg' or 'fg' command to silently open new tabs to any arbitrary URL — a textbook adware mechanism. CWS-disclosed data collection is 'none', making this comprehensive browsing-history collection wholly undisclosed. The publisher email domain '[domain withheld]' (an ad-network operator) corroborates monetization via ad-impression injection. A 'search' permission is present in the bundled manifest but absent from the published CWS manifest, indicating an undisclosed capability. The internal IoC flag, permhash cluster co-flagging ( malware), and chrome-stats 'permission-history' signal all corroborate; positive user ratings and first-party destination domain do not override the C2 tab-injection behavior.
Top Best Extension Chrome extension security report
ID: cpmbdnkbpaabapidllalnfopojfimbno
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- top-best.com
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
- 1 critical
- 2 high
The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.
1 critical finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Discover stunning travel destinations from around the world while managing your tabs more efficiently.
Read the publisher’s full description
Meet Top-Best, the tab manager extension tailored for dog enthusiasts and savvy surfers alike! Each new tab transforms your browsing experience into a realm of delightful discovery with interesting facts about every dog breed imaginable, along with showcasing adoptable dogs in your area. Enhance your computer’s performance by closing unused tabs, freeing up memory for a smoother experience. Dive into a world where every tab brings you closer to your next four-legged friend. Get Top-Best today and transform your browsing into an efficient and joyful journey! FEATURES: ✅ Master Your Tabs: Top-Best is engineered to empower you with seamless control over your browser tabs. Here's how it elevates your browsing: - Bulk Tab Closure: Simplify your digital space by closing multiple tabs in an instant. - Tab Search Functionality: We've all been there. Trying to find a tab we know it's open, but it's lost in the clutter? Quickly locate the tab you need without the hassle of rummaging through numerous others with a simple search. - Close or Save for later: Shut individual tabs with ease, enhancing your browsing organization. Conveniently add tabs to your bookmarks for swift retrieval and ongoing access. 🐶 Oh My Dog! A New Tab, A New Discovery Each new tab opens a window to joy and knowledge with a beautiful dog wallpaper, inviting you to explore the intriguing world of dog breeds: Learn about each breed's unique characteristics, including friendliness, protectiveness, lifespan, and origin. Transform your new tab moments into opportunities for learning and appreciation of canine diversity. 💗 Save Animals with a Gesture of Kindness: As you enjoy the benefits of Top-Best, you're indirectly supporting a noble cause. We’re dedicated to helping animals thrive and find their forever homes. Every time you search using any of your favorite search engines, we will donate to an animal charity at no cost to you. 🐕 Adoptable Dogs Nearby: With Top-Best, discover adoptable dogs in your vicinity with each new tab. Learn more about your potential new pet, including detailed profiles and their current location, all accessible through a single click. Start your journey to pet ownership seamlessly as you browse! Elevate your browsing with Top-Best, where every tab managed is a step towards a more organized digital life and every new tab opened is a journey into the heartwarming world of dogs.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
1 critical finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in Functionality & UI
- IDM Integration Module21,000,000 users
- Hola VPN - Your Website Unblocker4,000,000 users
- Video Speed Controller3,000,000 users
- SponsorBlock for YouTube - Skip Sponsorships2,000,000 users
- OneTab2,000,000 users
Store rankings
Where this extension appears in store category, collection and keyword rankings.