Chrome Web Store
4Versions
1Code reviewed

Do not install

Code review: critical (v1.6.0)

Our reviewer read version 1.6.0 of this extension and confirmed malicious behaviour. 2 security findings documented below. Do not install it. Remove it if you already have it.

277 indicators in this extension

277 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

True AdBlocker - free adblocker, used by 10,000 people, is rated malicious by Extension Auditor. Our code review reported 2 findings (1 critical, 1 high), led by other. Its permissions mean it can read and change data on all websites.

Key findings

  • Critical

    Other

    The 'altTb' handler opens a background window deliberately sized at 100×100 px with focused:false (invisible to the user), loads urlOne, waits 3.5 seconds, navigates to urlTwo, then destroys the tab after another 3.5 seconds. The 'smTb' handler performs the same sequence via an inactive pinned tab moved to index 0. Both URL pairs are passed in by the caller (most likely, which runs on every page but is absent from this bundle). This is a textbook invisible-tab click-fraud or affiliate-link-stuffing implementation: the user loads arbitrary ad or affiliate URLs and registers page visits and impressions they never see, generating fraudulent revenue for the extension operator. The code comments ('tab will open in inactive state in background') confirm the intent is concealment.

  • High

    Other

    The bundled manifest declares only 'declarativeNetRequest' and 'storage', but the published CWS manifest includes 'tabs'. The bundled actively calls chrome.windows.create, chrome.tabs.create, chrome.tabs.update, chrome.tabs.move, and chrome.tabs.remove — all APIs requiring the 'tabs' permission. Stripping 'tabs' from the submitted ZIP while retaining the functional code is consistent with an attempt to reduce automated and manual review scrutiny of the tab-manipulation behaviour.

Analyst notes

22-72 implements two message handlers ('altTb', 'smTb') that create hidden, tiny (100×100 px, focused:false) browser windows or inactive pinned tabs, silently navigate them through two externally-supplied URLs (urlOne → urlTwo) with 3.5-second delays, then close them — a textbook invisible-tab click-fraud and affiliate-commission-stuffing scheme. No ad-blocking function could justify this behaviour; the trigger code (, declared in the manifest as running on <all_urls>) is absent from the bundle, preventing full attribution, but the fraud mechanism is unambiguous. Both the ML score (0.01) and chrome-stats likelihood () missed this because they measure surface, not behavioural semantics. Additionally, the bundled manifest omits the 'tabs' permission that the live CWS listing declares, while actively calls chrome.tabs and chrome.windows APIs — indicating intentional stripping of the permission declaration to reduce review scrutiny.

True AdBlocker - free adblocker

True AdBlocker - free adblocker Chrome extension security report

ID: bfnbbojgkemfejhnedknbidfceobmmek

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.6.1
Size
2.29 MB
Rating
4.0/5
Reviews
65
Users
10,000
Type
Extension
Updated
Apr 23, 2024
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
11extensions
2 no longer listed

Publisher Contextual Analysis

Trusted
Author
Underpin Extensions
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
11
Active
9
Obsolete
2
Listed
11
Unlisted
0
Users
17,694

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

277 indicators in this extension

277 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Block Ads On Youtube, Twitch,spotify,hulu and popup

Read the publisher’s full description

Disable pop-ups and advertisements on your preferred websites, including Facebook, Twitch, and YouTube. The best trueAdblocker has over 60 million users and has been downloaded over 350 million times on Chrome. Features 1.Stop pop-ups, advertisements, and bothersome banners (and get rid of video commercials, too!) on all of your favourite websites, including YouTube, Facebook, and Twitch. 2.Block unauthorised trackers to safeguard your privacy. 3.By preventing unwanted advertisements, frauds, and Bitcoin miners, you may browse securely. 4.Enjoy faster internet by improving page load times. 5.Use filters, whitelists, dark mode, and other vibrant themes to make your experience more unique. 6.Backup and synchronise your custom ad-blocking rules and whitelists across all of your Chrome profiles. 7.Replace some adverts with images of cats, dogs, and landscapes to enjoy personalised ad blocking. 8.Receive immediate help from the trueAdblocker team and benefit from a comprehensive Help Center. About To block advertisements on the entire web, download the free trueAdblocker from trueAdblocker. In addition to defending your browser against viruses, trueAdblocker also prevents advertising from accessing your browsing history and private data. Chrome's trueAdlocker operates automatically. To see the ads gone, simply click "Add to Chrome" and then visit your desired page. Continue to see unobtrusive advertisements, add your favourite websites to a whitelist, or automatically ban all ads. Being a member of the Acceptable Advertising program, trueAdblocker allows modest advertisements to run on websites without being automatically disabled. Because we think users should prefer what they view online, trueAdblocker's settings make it simple to opt-out. Notes The warning you see about someone having access to your browsing history and website data was generated automatically because trueAdblocker runs in every tab. Yet, neither does it truly track your surfing history or require your personal data to work properly.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
246

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

277 indicators in this extension

277 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.6.0
Latest
2.32 MBMalicious0
712d9dd455f504f65e3ee8142d88b933ff476a1a8b7fec7df9dd532c1a431614
1.3.5
2.32 MBNot scanned—
712d9dd455f504f65e3ee8142d88b933ff476a1a8b7fec7df9dd532c1a431614
1.3.4
0.20 MBNot scanned—
712d9dd455f504f65e3ee8142d88b933ff476a1a8b7fec7df9dd532c1a431614
1.6.1
2.29 MBNot scanned—
7ae08e5f48866795d2ea751df7c9d53a3c053784296f11f03a4acd059c1a8a8e
Showing 1 to 4 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

More from Underpin Extensions