Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Unseen for Facebook

CRITICAL RISKRemoved from Chrome Web Store

Unseen for Facebook

ID: jiomcgpfgkeefipihnplhadgdoollmap

Could be malicious

Extension Info & Metadata

Status

Removed

Version

1.30.0

Size

1.31 MB

Rating

4.4/5

Reviews

4,551

Users

213,520

Type

Extension

Updated

Nov 24, 2020

Publisher Contextual Analysis

Author: http://fbunseen.comView Profile
MX records exist: No
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: No

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

213,520

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Remove the 'seen' feature from facebook and facebook messenger. You'll be unseen on facebook and facebook messenger.

Have people been mad at you because they noticed you saw their message but didn't respond to it? Have you ever wished you can use the messenger without people noticing you have read their messages? Do you just want to be Unseen? After experiencing these issues all on our own we decided to develop something which solves these problems. How does Unseen work? Download Unseen from the Chrome Webstore Start using Facebook without any worries about your friends knowing that you read their messages. Unseen will completely remove the “seen” feature from the messenger. So your friends won’t be able to tell if you read their messages. Our extension does not remove the “seen at” feature on both facebook.com and messenger.com for you, so you are still able to see when your friends read your messages, but they can't see when you read their message. For us it's important to say that we are not related in any way to Facebook which is a registered trademark of Facebook Inc., registered in the US and other countries. We are neither endorsed nor affiliated with but rather are an independent group of developers. If you find any bugs or have other questions please don't hesitate to contact us via our contact email. In case you have questions regarding your privacy, please check out our privacy policy.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High3

Medium2

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.30.0 Code review	6

Extension Version	Code Review Findings
1.30.0	6

Files with findings

2 distinct paths — top paths by unique finding count:

pages/background.js5
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	manifest.json (line 40)	The Content Security Policy explicitly whitelists 'https://static.trackized.com' as a trusted script source alongside Google Analytics. This is a deliberate architectural decision — the extension's background page is …	1.30.0
2	Network Interception	high	pages/background.js (line 19960)	The extension reads raw byte payloads from Facebook chat requests using 'details.requestBody.raw[0].bytes', decodes them via 'String.fromCharCode.apply(null, new Uint8Array(requestParams))', and parses the JSON body t…	1.30.0
3	Network Interception	high	pages/background.js (line 20175)	A blocking webRequest listener is registered on '<all_urls>' (every URL in the browser) with 'requestHeaders' and 'extraHeaders' access, giving the extension visibility into all HTTP request headers across all sites t…	1.30.0
4	Tracking	high	pages/background.js (line 19939)	The extension dynamically injects a third-party tracker script from 'static.trackized.com' into the persistent background page. This external script executes in the same page context as all the webRequest listeners th…	1.30.0
5	Other	medium	pages/background.js (line 20221)	The condition 'details.reason = 'install'' uses the assignment operator '=' instead of the equality operator '===' — the assignment always evaluates as truthy, meaning a new tab is forcibly opened to 'https://www.fbun…	1.30.0
6	Tracking	medium	pages/background.js (line 19921)	Google Analytics with 'displayfeatures' enabled is injected into the persistent background page. The 'displayfeatures' plugin collects demographic and interest data (age, gender, affinities) about the user. This runs …	1.30.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

231

IPv4

169

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/zloirock/core-js/issues/86	https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
github.com	/websockets/ws/pull/645	https://github.com/websockets/ws/pull/645
tc39.github.io	/ecma262/	https://tc39.github.io/ecma262/#sec-regexpexec
tc39.github.io	/proposal-setmap-offrom/	https://tc39.github.io/proposal-setmap-offrom/
fb.me	/prop-types-in-prod	http://fb.me/prop-types-in-prod
tc39.github.io	/ecma262/	https://tc39.github.io/ecma262/#sec-advancestringindex
github.com	/zloirock/core-js/issues/339	https://github.com/zloirock/core-js/issues/339
github.com	/feross/ieee754	https://github.com/feross/ieee754
github.com	/styled-components/styled-components/issues/1941	https://github.com/styled-components/styled-components/issues/1941#issuecomment-417862021\n\n
www.styled-components.com	/docs/api	https://www.styled-components.com/docs/api#css\n\n

Showing 1 to 10 of 240 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.2.1	IPv4	-
19.1.2.9	IPv4	-
15.2.3.2	IPv4	-
22.1.3.31	IPv4	-
19.1.2.14	IPv4	-
15.2.3.14	IPv4	-
19.1.2.2	IPv4	-
15.2.3.5	IPv4	-
19.1.2.7	IPv4	-
15.2.3.4	IPv4	-
19.1.3.6	IPv4	-
21.2.5.3	IPv4	-
21.2.5.8	IPv4	-
21.2.5.11	IPv4	-
21.2.5.6	IPv4	-
21.2.5.9	IPv4	-
20.2.2.28	IPv4	-
20.2.2.14	IPv4	-
25.1.2.1	IPv4	-
9.4.2.3	IPv4	-
22.1.3.6	IPv4	-
22.1.3.4	IPv4	-
22.1.3.13	IPv4	-
22.1.3.29	IPv4	-
22.1.3.30	IPv4	-
22.1.5.2	IPv4	-
9.4.4.6	IPv4	-
9.4.4.7	IPv4	-
25.4.1.5	IPv4	-
19.1.2.1	IPv4	-
20.1.2.3	IPv4	-
20.2.2.20	IPv4	-
20.2.2.16	IPv4	-
22.1.3.3	IPv4	-
23.1.3.6	IPv4	-
23.1.3.9	IPv4	-
23.1.3.1	IPv4	-
23.2.3.2	IPv4	-
23.1.3.3	IPv4	-
23.2.3.4	IPv4	-
23.2.3.6	IPv4	-
23.1.3.5	IPv4	-
23.1.3.7	IPv4	-
23.2.3.7	IPv4	-
23.1.3.4	IPv4	-
23.1.3.8	IPv4	-
23.1.3.11	IPv4	-
23.1.3.12	IPv4	-
23.2.3.5	IPv4	-
23.2.3.8	IPv4	-
23.2.3.10	IPv4	-
23.2.3.11	IPv4	-
23.1.2.2	IPv4	-
23.2.2.2	IPv4	-
23.2.3.1	IPv4	-
23.3.3.3	IPv4	-
23.3.3.5	IPv4	-
23.3.3.2	IPv4	-
23.4.3.3	IPv4	-
23.3.3.4	IPv4	-
23.4.3.4	IPv4	-
19.4.1.1	IPv4	-
19.4.2.2	IPv4	-
19.4.2.3	IPv4	-
19.4.2.4	IPv4	-
19.4.2.6	IPv4	-
19.4.2.8	IPv4	-
19.4.2.9	IPv4	-
19.4.2.10	IPv4	-
19.4.2.11	IPv4	-
19.4.2.12	IPv4	-
19.4.2.13	IPv4	-
19.4.2.14	IPv4	-
19.4.2.1	IPv4	-
19.4.2.5	IPv4	-
19.1.2.4	IPv4	-
19.1.2.3	IPv4	-
19.1.2.6	IPv4	-
19.1.2.8	IPv4	-
19.4.3.4	IPv4	-
19.4.3.5	IPv4	-
20.2.1.9	IPv4	-
15.2.3.6	IPv4	-
15.2.3.7	IPv4	-
19.1.2.5	IPv4	-
19.1.2.17	IPv4	-
19.1.2.15	IPv4	-
19.1.2.12	IPv4	-
19.1.2.13	IPv4	-
19.1.2.11	IPv4	-
19.1.3.1	IPv4	-
19.1.3.10	IPv4	-
19.1.3.19	IPv4	-
19.2.3.2	IPv4	-
15.3.4.5	IPv4	-
19.2.4.2	IPv4	-
19.2.3.6	IPv4	-
20.1.2.1	IPv4	-
20.1.2.2	IPv4	-
20.1.2.4	IPv4	-
20.1.2.5	IPv4	-
20.1.2.6	IPv4	-
20.1.2.10	IPv4	-
20.1.2.12	IPv4	-
20.1.2.13	IPv4	-
20.2.2.3	IPv4	-
20.2.2.5	IPv4	-
20.2.2.7	IPv4	-
20.2.2.9	IPv4	-
20.2.2.11	IPv4	-
20.2.2.12	IPv4	-
20.2.2.17	IPv4	-
20.2.2.18	IPv4	-
20.2.2.21	IPv4	-
20.2.2.22	IPv4	-
20.2.2.30	IPv4	-
20.2.2.33	IPv4	-
20.2.2.34	IPv4	-
21.1.2.2	IPv4	-
21.1.2.4	IPv4	-
21.1.3.25	IPv4	-
21.1.3.27	IPv4	-
21.1.5.2	IPv4	-
21.1.3.3	IPv4	-
21.1.3.6	IPv4	-
21.1.3.7	IPv4	-
21.1.3.13	IPv4	-
21.1.3.18	IPv4	-
20.3.3.1	IPv4	-
15.9.4.4	IPv4	-
20.3.4.36	IPv4	-
15.9.5.43	IPv4	-
22.1.2.2	IPv4	-
15.4.3.2	IPv4	-
22.1.2.1	IPv4	-
22.1.2.3	IPv4	-
22.1.3.25	IPv4	-
22.1.3.10	IPv4	-
15.4.4.18	IPv4	-
22.1.3.15	IPv4	-
15.4.4.19	IPv4	-
22.1.3.7	IPv4	-
15.4.4.20	IPv4	-
22.1.3.23	IPv4	-
15.4.4.17	IPv4	-
22.1.3.5	IPv4	-
15.4.4.16	IPv4	-
22.1.3.18	IPv4	-
15.4.4.21	IPv4	-
22.1.3.19	IPv4	-
15.4.4.22	IPv4	-
22.1.3.11	IPv4	-
15.4.4.14	IPv4	-
22.1.3.14	IPv4	-
15.4.4.15	IPv4	-
22.1.3.8	IPv4	-
22.1.3.9	IPv4	-
21.2.5.14	IPv4	-
25.4.3.1	IPv4	-
25.4.5.3	IPv4	-
25.4.5.1	IPv4	-
25.4.4.5	IPv4	-
25.4.4.6	IPv4	-
25.4.4.1	IPv4	-
25.4.4.4	IPv4	-
23.4.3.1	IPv4	-
24.1.3.1	IPv4	-
24.1.4.3	IPv4	-
25.3.3.3	IPv4	-

Showing 1 to 169 of 170 rows

Rows per page:

3.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

It worked before. It doesn't work anymore.

Josh Two·4 Feb 2021

does it works anymore? after facebook last update on my browser it doesnt work. any solutions?

Sandro Surguladze·3 Feb 2021

I love facebook Unseen. I receive a lot of messages daily, some from friends, some from unknown individuals, and I am a busy woman. I prefer to reply to messages on my own time, and not feel pressured to reply when unconvenient. So helpful for giving me back some time and freedom!

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Unseen for Facebook

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating