Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Video speed controls

CRITICAL RISKRemoved from Chrome Web Store

Video speed controls

ID: jjcknheidgokldiicpjlefcgbbdlilep

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

2.1.3

Size

0.46 MB

Rating

4.4/5

Reviews

Users

142,335

Type

Extension

Updated

Feb 16, 2021

Publisher Contextual Analysis

Author: Melvin ReichelView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

142,335

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Video speed controls - change playback speed while watching videos online.

With Video speed controls you can increase or decrease speed on any embed video. Features: - Change video speed to 0.5x, 1.5x, 2x, or 3x speed - Keyboard shortcuts and inline buttons - Works on all sites How to use the extension: 1) Use speed controls over the video 2) Or use shortcuts (case insensitive): R - default playback speed S - slow down D - increase speed 3) If you just installed an extension: refresh a page with video to enable functionality

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High2

Medium0

Low2

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.1.3 Code review	5

Extension Version	Code Review Findings
2.1.3	5

Files with findings

2 distinct paths — top paths by unique finding count:

background.js4
inject.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	background.js (line 6528)	Heavily obfuscated code embedded inside the ChromePromise constructor dynamically builds and injects a Google Tag Manager script tag (GTM-P2RD6SH) at runtime. It reconstructs the string 'gtm' by reversing an array, re…	2.1.3
2	Obfuscation	high	background.js (line 1)	All three JavaScript files (background.js, inject.js, popup.js) each embed a full copy of the jQuery library (~6,430 lines), dwarfing the actual extension logic (~250 lines). The malicious GTM injection code is hidden…	2.1.3
3	Tracking	high	background.js (line 26)	The manifest explicitly whitelists Google Analytics, Google Tag Manager, and all googleapis.com subdomains in the Content Security Policy. A video speed controller has no legitimate need for any of these tracking doma…	2.1.3
4	Code Injection	low	background.js (line 6646)	The background script re-executes inject.js into the active tab via chrome.tabs.executeScript without specifying a target tab ID, relying on the implicit active tab. While nominally used to re-inject the content scrip…	2.1.3
5	Other	low	inject.js (line 6435)	The entire content script logic is wrapped inside a chrome.extension.sendMessage({}, ...) callback, using the deprecated chrome.extension API instead of chrome.runtime. While this is sometimes used to verify extension…	2.1.3

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/master/LICENSE	https://github.com/twbs/bootstrap/blob/master/LICENSE
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
ns.adobe.com	/photoshop/1.0/	http://ns.adobe.com/photoshop/1.0/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceEvent	http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

deu certo, mt bom!

fabiana·7 Jun 2021

I'm sure this is just copy an pasted from somewhere and the developer didn't bother to read his own privacy policy, but it literally says "Wherever we collect sensitive information (such as credit card data), that information is encrypted and transmitted to us in a secure way." I don't think I need to explain how that could be abused.

CringeXP·31 May 2021

Cool extension. Helps you set up video viewing

ЛХ

Логан Хоулетт

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Video speed controls

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating