Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: What's The Weather Extension

CRITICAL RISKRemoved from Chrome Web Store

What's The Weather Extension

ID: iladehcmdhcececengfcepclhfaicagn

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.0

Size

0.95 MB

Rating

0.0/5

Reviews

Users

6,153

Type

Extension

Updated

Jul 14, 2021

Publisher Contextual Analysis

Author: http://browsertech.coView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

18,503

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Check weather report and forecast in your browser new tab. Play around with weather specific custom background in your new tab.

Check weather report and forecast in your browser new tab. Play around with weather specific custom background in your new tab. What's the Weather gives you an easy way for getting current & weather of different locations and garnishes your Chrome Browser new tab default looks to an attractive New tab. This is a free add-on for Chrome Browser where the primary target is getting today's weather & weekly weather according to your location easily and quickly. Also, set a background from our selective Weather images gallery powered by Unsplash in your Chrome Browser default new tab. We are actually changing your Chrome browser default new tab page. Also as an added feature : 1) Convert temperature units 2) Enter your Location 3) Set current Weather-wise Background 4) Search your desired information, image, video and others through Bing search. By clicking "Add to Chrome", I accept and agree to install "What's the Weather" and setting Chrome™ New Tab to that provided by the service and the Privacy (https://browsertech.co/privacy-policy/) and Terms of Use (https://browsertech.co/terms-conditions/).

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium3

Low1

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0 Code review	6

Extension Version	Code Review Findings
1.0	6

Files with findings

2 distinct paths — top paths by unique finding count:

custom.js5
background.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	high	custom.js (line 1124)	eval() is invoked on a value that comes directly from the JSON response of api.browsertech.co (weatherReport.main.temp). Although the intent appears to be a numeric subtraction, eval() will execute arbitrary JavaScrip…	1.0
2	Tracking	high	custom.js (line 2268)	The new-tab page injects a search box. On Enter, the typed query is appended to a redirection_url template fetched at runtime from api.browsertech.co (method=get_ext_detail) and the browser is navigated there via wind…	1.0
3	Code Injection	medium	custom.js (line 1233)	HTML strings (`hourly`, `weekly`) are built by concatenating fields from the api.browsertech.co response (icon path, weather description) and then assigned via innerHTML in the chrome-extension://… new-tab page. Becau…	1.0
4	Tracking	medium	background.js (line 27)	On install the service worker calls api.browsertech.co with method=get_ext_detail and lets the server remotely decide whether to (a) open a new tab to homepage_url+"/thankyou" and (b) register a uninstall URL via chro…	1.0
5	Unauthorized Data Collection	medium	custom.js (line 2230)	Every character typed into the new-tab search box is sent (method=get_suggestions, keyword=<input>) to api.browsertech.co. Combined with the search-redirect handler above, this provides the operator with a continuous …	1.0
6	Obfuscation	low	custom.js (line 2771)	Rather than hard-coding the backend URL, the extension reads it indirectly out of manifest host_permissions at runtime (the same trick is used in background.js). This indirection is a soft obfuscation pattern that dec…	1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
ns.adobe.com	/photoshop/1.0/	http://ns.adobe.com/photoshop/1.0/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceEvent	http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
ns.adobe.com	/xap/1.0/sType/ResourceRef	http://ns.adobe.com/xap/1.0/sType/ResourceRef#
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
whatistheweather.browsertech.co	-	https://whatistheweather.browsertech.co

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

What's The Weather Extension

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating