Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Video speed controls

CRITICAL RISKRemoved from Chrome Web Store

Video speed controls

ID: dfbkneebffeaedbfokcgpdmfkaffcpnj

Could be malicious

Extension Info & Metadata

Status

Removed

Version

1.2.3

Size

0.43 MB

Rating

4.5/5

Reviews

107

Users

1,999,533

Type

Extension

Updated

Nov 13, 2020

Publisher Contextual Analysis

Author: Jose ContrerasView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

1,999,533

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Video speed controls - change playback speed while watching videos online.

With Video speed controls you can increase or decrease speed on any embed video. Features: - Change video speed to 0.5x, 1.5x, 2x, or 3x speed - Keyboard shortcuts and inline buttons - Works on all sites How to use the extension: 1) Use speed controls over the video 2) Or use shortcuts (case insensitive): R - default playback speed S - slow down D - increase speed 3) If you just installed an extension: refresh a page with video to enable functionality

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High1

Medium1

Low2

Versions scanned

Showing 2 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.2.3 Code review	3
1.2.2 Code review	2

Extension Version	Code Review Findings
1.2.3	3
1.2.2	2

Files with findings

4 distinct paths — top paths by unique finding count:

popup.html2
background.js1
inject.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	background.js (line 13)	The background script dynamically injects a Google Tag Manager container (GTM-KVGBRL2) into the background page by replacing the first DOM child with a new script element pointing to the GTM endpoint. GTM is a known r…	1.2.3
2	Remote Code Loading	high	manifest.json (line 27)	The extension's Content Security Policy explicitly whitelists `https://www.googletagmanager.com` and `https://www.google-analytics.com` as permitted script sources for the background and popup pages. This is the inten…	1.2.3
3	Other	medium	inject.js (line 1)	The entire content script is wrapped inside the callback of `chrome.extension.sendMessage({}, callback)`, a deprecated API that sends an empty message to the extension's background page before any functionality execut…	1.2.2
4	Tracking	low	popup.html (line 4)	The popup page loads Bootstrap CSS from an external CDN (stackpath.bootstrapcdn.com) rather than bundling it locally. While a Subresource Integrity hash is present, this still creates an external network dependency th…	1.2.3
5	Tracking	low	popup.html (line 4)	The popup loads Bootstrap CSS from an external CDN (stackpath.bootstrapcdn.com) rather than bundling it locally. Every time any of the 2M users opens the extension popup, a network request is sent to a third-party ser…	1.2.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.googletagmanager.com	/gtm.js	https://www.googletagmanager.com/gtm.js?id=GTM-KVGBRL2&l=dl
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
ns.adobe.com	/photoshop/1.0/	http://ns.adobe.com/photoshop/1.0/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceEvent	http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license

Showing 1 to 10 of 80 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-

3.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Does not work

Bekzat Bekturgan·6 Feb 2021

YouTube does not have time to load x3 speed videо lags

НШ

Никита Шахматов·4 Feb 2021

After you close the menu (by clicking V), you can't open it again and you have to refresh the page. This is frustrating when you are in the middle of a video and you click the V by mistake!!! Add another button to re-open the menu again.

Abdulrahman R Abdulrahman Al Daghir

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Video speed controls

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews