Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: vksaver - music saver vk

CRITICAL RISKRemoved from Chrome Web Store

vksaver - music saver vk

ID: lnfeimcodfbhcnbllmeemfadfnmeacac

Could be malicious

Supported Languages

🇺🇸English

🇷🇺Russian

Extension Info & Metadata

Status

Removed

Version

1.1.7

Size

0.11 MB

Rating

4.6/5

Reviews

154

Users

40,000

Type

Extension

Updated

Nov 1, 2024

Publisher Contextual Analysis

Author: https://vksaver.siteView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

42,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

VKsaver - save music with bitrate display, select folder to save

Vksaver - поможет Вам скачать музыку ВКонтакте и видео. Сохраняются файлы с оригинальным названием, указанным в социальной сети. Иконки расширения вписываются в пользовательский интерфейс vk.com и не отвлекают внимание. VKsaver are for informational purposes only, thanks to which you have the opportunity to download media files (audio, video) from the VKontakte social network. We are against piracy, so the user who installed our extension agrees to remove it within 24 hours after installation or to take care of paying for the copyright yourself. We disclaim all responsibility for what purposes VKsaver will be used. С помощью нашего расширения вы можете скачать бесплатно музыку из вк и слушать любимые композиции без ограничений. --------- Если у вас возникли проблемы в работе расширения или с музыкой/видео, которые невозможно скачать, пожалуйста, не ставьте плохой рейтинг, а напишите нам по адресу [email protected] и помогите улучшить расширение. Спасибо! --------- vksaver - music saver vk собирает данные из вашего браузера для предоставления и улучшения наших продуктов и услуг, обновления программного обеспечения, работы с динамическим контентом. Если вы не согласны с условиями Политики конфиденциальности, удалите расширение. Политика конфиденциальности: https://vksaver.site/privacy.html --------- vksaver - music saver vk collects data from your browser to provide and improve our products and services, update software, and work with dynamic content. If you do not agree with the terms of the Privacy Policy, remove the extension. Privacy Policy: https://vksaver.site/privacy.html --------- Рекламные объявления Дорогие друзья и пользователи расширения, в процессе разработки этого расширения было вложено очень много часов, потраченных на: добавление функций, исправление ошибок и улучшения. Дополнительный доход, генерируемый за счет рекламы, поможет дальнейшему развитию проекта. --------- Advertisement Dear friends and users of my add-on vksaver, in the process of development of this extension I have invested many hours spent on: adding features, fixing bugs and improvements. The additional income generated by this optional advertising, will benefit to the further development of this project.

User Growth

Showing data from Aug 30, 2023 to Aug 28, 2024

Versions

+100%(+20,000 users)

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 101 ratings

Average Rating

Current: 4.67 / 5.0+4.67

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium1

Low0

Versions scanned

Showing 1 of 9 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.5 Code review	3

Extension Version	Code Review Findings
1.1.5	3

Files with findings

2 distinct paths — top paths by unique finding count:

js/main.js2
js/background.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	js/main.js (line 647)	Unauthorized injection of third-party Yandex ads into the VK.com user interface. The script creates new elements in the feed and sidebar specifically to render ads from a predefined blockId.	1.1.5
2	Other	high	js/main.js (line 622)	Programmatically publishing posts to the user's VK wall by exploiting internal page APIs and extracting CSRF hashes (shHash). This bypasses the standard user interface for social interactions.	1.1.5
3	Tracking	medium	js/background.js (line 75)	Injecting a custom HTTP header 'vksaverID' into requests containing 'vksaver' in the URL. This can be used to track extension users across different websites or identify them to specific servers.	1.1.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/1999/html	http://www.w3.org/1999/html
vksaver.site	/vk/1.html	https://vksaver.site/vk/1.html
vksaver.site	/vk/2.html	https://vksaver.site/vk/2.html
vksaver.site	/support.html	https://vksaver.site/support.html
*.vkuservideo.net	/*	https://.vkuservideo.net/
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	/*	http:///
*	/*	https:///
cloud.m3stream.net	/ver.json	https://cloud.m3stream.net/ver.json
vk.com	/*	https://vk.com/*

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Все прекрасно работает! Спасибо вам разработчики:)

mietaspirant·8 Feb 2025

Всё работает. Проблем нет. Удобно работает

Sanzhapov·11 Jan 2025

супер

ГМ

Гусен Магомедов·22 Dec 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

vksaver - music saver vk

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 9 Versions3

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating