Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Yola Lexis Extension

CRITICAL RISKRemoved from Chrome Web Store

Yola Lexis Extension

ID: odeehfkncohpobkeeldjblbkfghfbpai

Could be malicious

Supported Languages

🇺🇸English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

0.7.2

Size

2.00 MB

Rating

4.1/5

Reviews

Users

19,477

Type

Extension

Updated

Feb 21, 2023

Publisher Contextual Analysis

Trusted

Author: Yola EducationView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

19,477

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Look up and translate text with Yola Lexis Extension

With Yola Lexis Extension, users can 👌 Look up words instantly in YouTube and Netflix subtitles and website content 👌 Watch movies and videos with dual subtitles 👌 Translate text in a snap and get suggestions for words or idiomatic phrases to learn 👌 Save vocabulary in different personal study sets Yola Lexis Extension comes with a mobile app with hybrid functions of dictionaries and vocabulary builder, helping English learners of any level quickly memorize and confidently use all the words they learn. Download or learn more about Yola Lexis App at: https://lexis.yola.vn/

User Growth

Showing data from Apr 26, 2022 to Apr 27, 2023

Versions

+19.33%(+3,155 users)

Compared to 3 months ago

27 versions released in this period

Rating Count

Total: 11 ratings

Average Rating

Current: 4.09 / 5.0+4.09

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High0

Medium2

Low3

Versions scanned

Showing 1 of 27 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.7.2 Code review	5

Extension Version	Code Review Findings
0.7.2	5

Files with findings

4 distinct paths — top paths by unique finding count:

webContentScript.js2
en/189-es2017.043c4777d985605ab31d.js1
serviceWorker.js1
videoInjectScript.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	medium	videoInjectScript.js (line 745)	On Netflix, the inject script monkey-patches the global JSON.stringify and JSON.parse on the page so that every JSON serialization Netflix performs is mutated (params.showAllSubDubTracks forced true, the webvtt-lssdh-…	0.7.2
2	Unauthorized Data Collection	medium	en/189-es2017.043c4777d985605ab31d.js (line 359)	After login, the user's phone number and full profile object are passed to eventTrackingService.identify() and a follow-up account.loggedIn track event is fired with the entire profile. Using a phone number as a track…	0.7.2
3	Code Injection	low	webContentScript.js (line 3936)	Folder name and color values from user config are interpolated directly into innerHTML without escaping. Although the data is sourced from the user's own backend profile, any HTML in the folder name (or a malicious co…	0.7.2
4	Tracking	low	webContentScript.js (line 4049)	The web content script (matches :///*) attaches selectionchange/mouseup listeners on every page the user visits and reads window.getSelection() text plus its surrounding paragraph context. The captured text is later…	0.7.2
5	Tracking	low	serviceWorker.js (line 809)	The service worker forwards every text the user looks up (selected text from any page) to Google's clients5.google.com/translate_a/t endpoint with a dict-chrome-ex client identifier. Functionally this matches the exte…	0.7.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.youtube.com	/*	https://www.youtube.com/*
www.netflix.com	/*	https://www.netflix.com/*
clients5.google.com	/translate_a/t	https://clients5.google.com/translate_a/t?
bit.ly	/getsizebug1	https://bit.ly/getsizebug1
draggabilly.desandro.com	-	https://draggabilly.desandro.com
fontello.commaterial	-	http://fontello.comMaterial
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.apache.org	/licenses/	http://www.apache.org/licenses/
www.apache.org	/licenses/LICENSE-2.0	http://www.apache.org/licenses/LICENSE-2.0

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.7 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

nghe tin wed sửa được cũng vui giờ bình thường lại òi . I like it

My Nguyen·17 Aug 2023

tự nhiên mấy hôm nay app làm ăn kì cục không cho dùng nữa là sao? bấy lâu này dùng khá êm với cũng quen r ý. admin fix lại đi ạ

Ming Ngọc·11 Aug 2023

tự nhiên mấy hôm nay app l��m ăn kì cục không cho dùng nữa là sao? bấy l��u này dùng khá ��m với cũng quen r ý. admin fix l��i đi ạ

Ming Ngọc

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Yola Lexis Extension

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 27 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating