Is "Stashed" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.0.0

Stashed is an open-source alternative to Pocket, designed to help you save, organize, and revisit web pages with ease. Effortlessly save articles, blogs, and any web content for later reading. Organize your saved pages with tags and folders, and access your collection from any device. Stashed puts privacy and user control first—your data stays yours, and the project is fully open-source. Key Features: One-click saving of web pages Organize with tags and folders Sync across devices Take control of your reading list and never lose track of interesting content again. Try Stashed today!

Risk Assessment

Analyzed
62.47
out of 100
MEDIUM

230 security findings detected across all analyzers

Severity Breakdown

0
Critical
27
High
203
Medium
0
Low
0
Info

Finding Categories

27
Malware
7
Network
192
IoC Indicators

YARA Rules Matched

9 rules(27 hits)
postinstall system command postinstall obfuscation postinstall network communication postinstall file download postinstall crypto operations NoUseWeakRandom postinstall environment access postinstall file manipulation LocalStorageShouldNotBeUsed

About This Extension

Stashed is an open-source alternative to Pocket, designed to help you save, organize, and revisit web pages with ease. Effortlessly save articles, blogs, and any web content for later reading. Organize your saved pages with tags and folders, and access your collection from any device. Stashed puts privacy and user control first—your data stays yours, and the project is fully open-source. Key Features: One-click saving of web pages Organize with tags and folders Sync across devices Take control of your reading list and never lose track of interesting content again. Try Stashed today!

Detailed Findings

35 total

YARA Rule Matches

9 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
12
IP Addresses
10
Domains
172
Strings
192

All Indicators · 192

Domain
detected Domain: n.state.data

XIOC detected Domain: n.state.data

extracted_from_files

URL
detected URL: http://www.w3.org/1999/xhtml

XIOC detected URL: http://www.w3.org/1999/xhtml

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://getstashedio.vercel.app/

XIOC detected URL: https://getstashedio.vercel.app/

extracted_from_files

URL
detected URL: http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia

XIOC detected URL: http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia

extracted_from_files

URL
detected URL: http://va.truepic.com/ejbca/publicweb/status/ocsp0

XIOC detected URL: http://va.truepic.com/ejbca/publicweb/status/ocsp0

extracted_from_files

URL
detected URL: https://reactjs.org/docs/error-decoder.html?invariant=

XIOC detected URL: https://reactjs.org/docs/error-decoder.html?invariant=

extracted_from_files

URL
detected URL: http://www.w3.org/1999/xlink

XIOC detected URL: http://www.w3.org/1999/xlink

extracted_from_files

URL
detected URL: http://www.w3.org/XML/1998/namespace

XIOC detected URL: http://www.w3.org/XML/1998/namespace

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

Domain
detected Domain: xg.sm

XIOC detected Domain: xg.sm

extracted_from_files

Domain
detected Domain: q.ar

XIOC detected Domain: q.ar

extracted_from_files

Domain
detected Domain: f0.mg

XIOC detected Domain: f0.mg

extracted_from_files

Domain
detected Domain: 4.dk

XIOC detected Domain: 4.dk

extracted_from_files

URL
detected URL: http://localhost:9999

XIOC detected URL: http://localhost:9999

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/LockManager/request

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/LockManager/request

extracted_from_files

URL
detected URL: https://kfcfejsyhsfpojcdcewb.supabase.co

XIOC detected URL: https://kfcfejsyhsfpojcdcewb.supabase.co

extracted_from_files

Domain
detected Domain: ƌ.gy

XIOC detected Domain: ƌ.gy

extracted_from_files

Domain
detected Domain: am.bn

XIOC detected Domain: am.bn

extracted_from_files

Domain
detected Domain: yn.sm

XIOC detected Domain: yn.sm

extracted_from_files

Domain
detected Domain: a.sa

XIOC detected Domain: a.sa

extracted_from_files

Domain
detected Domain: s.us

XIOC detected Domain: s.us

extracted_from_files

Domain
detected Domain: 2.ms

XIOC detected Domain: 2.ms

extracted_from_files

Domain
detected Domain: sn.ec

XIOC detected Domain: sn.ec

extracted_from_files

Domain
detected Domain: c2pa.hash.data

XIOC detected Domain: c2pa.hash.data

extracted_from_files

Domain
detected Domain: va.truepic.com

XIOC detected Domain: va.truepic.com

extracted_from_files

Domain
detected Domain: w.gs

XIOC detected Domain: w.gs

extracted_from_files

Domain
detected Domain: mz.my

XIOC detected Domain: mz.my

extracted_from_files

Domain
detected Domain: 鰪e.jo

XIOC detected Domain: 鰪e.jo

extracted_from_files

Domain
detected Domain: 3.ve

XIOC detected Domain: 3.ve

extracted_from_files

Domain
detected Domain: ss.gf

XIOC detected Domain: ss.gf

extracted_from_files

Domain
detected Domain: ve.id

XIOC detected Domain: ve.id

extracted_from_files

Domain
detected Domain: ye.map

XIOC detected Domain: ye.map

extracted_from_files

Domain
detected Domain: a.id

XIOC detected Domain: a.id

extracted_from_files

Domain
detected Domain: x.id

XIOC detected Domain: x.id

extracted_from_files

Domain
detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain
detected Domain: x.name

XIOC detected Domain: x.name

extracted_from_files

IP
detected Domain: cv.iptc.org

XIOC detected Domain: cv.iptc.org

extracted_from_files

Domain
detected Domain: t.state.data

XIOC detected Domain: t.state.data

extracted_from_files

Domain
detected Domain: c.call

XIOC detected Domain: c.call

extracted_from_files

Domain
detected Domain: v.call

XIOC detected Domain: v.call

extracted_from_files

Domain
detected Domain: s.id

XIOC detected Domain: s.id

extracted_from_files

Domain
detected Domain: f.save

XIOC detected Domain: f.save

extracted_from_files

Domain
detected Domain: v.id

XIOC detected Domain: v.id

extracted_from_files

Domain
detected Domain: n.id

XIOC detected Domain: n.id

extracted_from_files

Domain
detected Domain: s.data

XIOC detected Domain: s.data

extracted_from_files

Domain
detected Domain: r.map

XIOC detected Domain: r.map

extracted_from_files

Domain
detected Domain: f.data

XIOC detected Domain: f.data

extracted_from_files

Domain
detected Domain: a.data

XIOC detected Domain: a.data

extracted_from_files

Domain
detected Domain: s.select

XIOC detected Domain: s.select

extracted_from_files

Domain
detected Domain: o.data

XIOC detected Domain: o.data

extracted_from_files

Domain
detected Domain: q.data

XIOC detected Domain: q.data

extracted_from_files

Domain
detected Domain: f.call

XIOC detected Domain: f.call

extracted_from_files

Domain
detected Domain: j.call

XIOC detected Domain: j.call

extracted_from_files

Domain
detected Domain: m.call

XIOC detected Domain: m.call

extracted_from_files

Domain
detected Domain: q.call

XIOC detected Domain: q.call

extracted_from_files

Domain
detected Domain: e.map

XIOC detected Domain: e.map

extracted_from_files

Domain
detected Domain: e.state.data

XIOC detected Domain: e.state.data

extracted_from_files

Domain
detected Domain: s.state.data

XIOC detected Domain: s.state.data

extracted_from_files

Domain
detected Domain: y.call

XIOC detected Domain: y.call

extracted_from_files

Domain
detected Domain: a.call

XIOC detected Domain: a.call

extracted_from_files

Domain
detected Domain: this.state.data

XIOC detected Domain: this.state.data

extracted_from_files

Domain
detected Domain: b.call

XIOC detected Domain: b.call

extracted_from_files

Domain
detected Domain: r.data

XIOC detected Domain: r.data

extracted_from_files

Domain
detected Domain: o.call

XIOC detected Domain: o.call

extracted_from_files

Domain
detected Domain: h.call

XIOC detected Domain: h.call

extracted_from_files

Domain
detected Domain: l.style

XIOC detected Domain: l.style

extracted_from_files

Domain
detected Domain: m.memoizedprops.style

XIOC detected Domain: m.memoizedprops.style

extracted_from_files

Domain
detected Domain: i.call

XIOC detected Domain: i.call

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: getstashedio.vercel.app

XIOC detected Domain: getstashedio.vercel.app

extracted_from_files

Domain
detected Domain: r.call

XIOC detected Domain: r.call

extracted_from_files

Domain
detected Domain: p.call

XIOC detected Domain: p.call

extracted_from_files

Domain
detected Domain: k.next

XIOC detected Domain: k.next

extracted_from_files

Domain
detected Domain: g.next

XIOC detected Domain: g.next

extracted_from_files

Domain
detected Domain: f.next

XIOC detected Domain: f.next

extracted_from_files

Domain
detected Domain: n.compare

XIOC detected Domain: n.compare

extracted_from_files

Domain
detected Domain: r.is

XIOC detected Domain: r.is

extracted_from_files

Domain
detected Domain: r.next

XIOC detected Domain: r.next

extracted_from_files

Domain
detected Domain: u.name

XIOC detected Domain: u.name

extracted_from_files

Domain
detected Domain: u.next

XIOC detected Domain: u.next

extracted_from_files

Domain
detected Domain: o.next

XIOC detected Domain: o.next

extracted_from_files

Domain
detected Domain: i.next

XIOC detected Domain: i.next

extracted_from_files

Domain
detected Domain: v.next

XIOC detected Domain: v.next

extracted_from_files

Domain
detected Domain: w.call

XIOC detected Domain: w.call

extracted_from_files

Domain
detected Domain: p.next

XIOC detected Domain: p.next

extracted_from_files

Domain
detected Domain: n.data

XIOC detected Domain: n.data

extracted_from_files

Domain
detected Domain: v.data

XIOC detected Domain: v.data

extracted_from_files

Domain
detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

Domain
detected Domain: d.next

XIOC detected Domain: d.next

extracted_from_files

Domain
detected Domain: vt.next

XIOC detected Domain: vt.next

extracted_from_files

Domain
detected Domain: n.next

XIOC detected Domain: n.next

extracted_from_files

Domain
detected Domain: l.next

XIOC detected Domain: l.next

extracted_from_files

Domain
detected Domain: t.next

XIOC detected Domain: t.next

extracted_from_files

Domain
detected Domain: this.target

XIOC detected Domain: this.target

extracted_from_files

IP
detected IP: ::bac

XIOC detected IP: ::bac

extracted_from_files

Domain
detected Domain: e.top

XIOC detected Domain: e.top

extracted_from_files

Domain
detected Domain: t.target

XIOC detected Domain: t.target

extracted_from_files

Domain
detected Domain: p.target

XIOC detected Domain: p.target

extracted_from_files

Domain
detected Domain: s.target

XIOC detected Domain: s.target

extracted_from_files

Domain
detected Domain: p.data

XIOC detected Domain: p.data

extracted_from_files

Domain
detected Domain: l.call

XIOC detected Domain: l.call

extracted_from_files

Domain
detected Domain: u.call

XIOC detected Domain: u.call

extracted_from_files

Domain
detected Domain: e.style

XIOC detected Domain: e.style

extracted_from_files

Domain
detected Domain: t.style

XIOC detected Domain: t.style

extracted_from_files

Domain
detected Domain: t.is

XIOC detected Domain: t.is

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain
detected Domain: performance.now

XIOC detected Domain: performance.now

extracted_from_files

Domain
detected Domain: u.now

XIOC detected Domain: u.now

extracted_from_files

Domain
detected Domain: o.now

XIOC detected Domain: o.now

extracted_from_files

Domain
detected Domain: hl.call

XIOC detected Domain: hl.call

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: yi.call

XIOC detected Domain: yi.call

extracted_from_files

Domain
detected Domain: s.call

XIOC detected Domain: s.call

extracted_from_files

Domain
detected Domain: e.next

XIOC detected Domain: e.next

extracted_from_files

Domain
detected Domain: t.call

XIOC detected Domain: t.call

extracted_from_files

Domain
detected Domain: sf.call

XIOC detected Domain: sf.call

extracted_from_files

Domain
detected Domain: c.id-n.id

XIOC detected Domain: c.id-n.id

extracted_from_files

Domain
detected Domain: e.phone

XIOC detected Domain: e.phone

extracted_from_files

Domain
detected Domain: e.channel

XIOC detected Domain: e.channel

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: this.rest

XIOC detected Domain: this.rest

extracted_from_files

Domain
detected Domain: this.realtime.channel

XIOC detected Domain: this.realtime.channel

extracted_from_files

Domain
detected Domain: kfcfejsyhsfpojcdcewb.supabase.co

XIOC detected Domain: kfcfejsyhsfpojcdcewb.supabase.co

extracted_from_files

Domain
detected Domain: reactjs.org

XIOC detected Domain: reactjs.org

extracted_from_files

Domain
detected Domain: i.storage

XIOC detected Domain: i.storage

extracted_from_files

Domain
detected Domain: this.storage

XIOC detected Domain: this.storage

extracted_from_files

Domain
detected Domain: d.channel

XIOC detected Domain: d.channel

extracted_from_files

Domain
detected Domain: l.data

XIOC detected Domain: l.data

extracted_from_files

Domain
detected Domain: l.channel

XIOC detected Domain: l.channel

extracted_from_files

Domain
detected Domain: 1e3-date.now

XIOC detected Domain: 1e3-date.now

extracted_from_files

Domain
detected Domain: e.email

XIOC detected Domain: e.email

extracted_from_files

Domain
detected Domain: r.name

XIOC detected Domain: r.name

extracted_from_files

Domain
detected Domain: object.prototype.propertyisenumerable.call

XIOC detected Domain: object.prototype.propertyisenumerable.call

extracted_from_files

Domain
detected Domain: i.new

XIOC detected Domain: i.new

extracted_from_files

Domain
detected Domain: e.page

XIOC detected Domain: e.page

extracted_from_files

Domain
detected Domain: c.total

XIOC detected Domain: c.total

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: i.name

XIOC detected Domain: i.name

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: d.id

XIOC detected Domain: d.id

extracted_from_files

Domain
detected Domain: s.download

XIOC detected Domain: s.download

extracted_from_files

Domain
detected Domain: i.map

XIOC detected Domain: i.map

extracted_from_files

Domain
detected Domain: t.download

XIOC detected Domain: t.download

extracted_from_files

Domain
detected Domain: f.id

XIOC detected Domain: f.id

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Domain
detected Domain: d.data

XIOC detected Domain: d.data

extracted_from_files

Domain
detected Domain: t.new

XIOC detected Domain: t.new

extracted_from_files

Domain
detected Domain: this.channels.map

XIOC detected Domain: this.channels.map

extracted_from_files

Domain
detected Domain: k.open

XIOC detected Domain: k.open

extracted_from_files

Domain
detected Domain: q.open

XIOC detected Domain: q.open

extracted_from_files

Domain
detected Domain: l.map

XIOC detected Domain: l.map

extracted_from_files

Domain
detected Domain: i.metas.map

XIOC detected Domain: i.metas.map

extracted_from_files

Domain
detected Domain: r.channel

XIOC detected Domain: r.channel

extracted_from_files

Domain
detected Domain: c.channel

XIOC detected Domain: c.channel

extracted_from_files

Domain
detected Domain: s.map

XIOC detected Domain: s.map

extracted_from_files

Domain
detected Domain: j.id

XIOC detected Domain: j.id

extracted_from_files

Domain
detected Domain: c.name

XIOC detected Domain: c.name

extracted_from_files

Domain
detected Domain: w.money

XIOC detected Domain: w.money

extracted_from_files

Domain
detected Domain: n.map

XIOC detected Domain: n.map

extracted_from_files

Domain
detected Domain: this.channel

XIOC detected Domain: this.channel

extracted_from_files

Domain
detected Domain: t.events

XIOC detected Domain: t.events

extracted_from_files

Domain
detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain
detected Domain: h.map

XIOC detected Domain: h.map

extracted_from_files

Domain
detected Domain: u.map

XIOC detected Domain: u.map

extracted_from_files

Domain
detected Domain: r.open

XIOC detected Domain: r.open

extracted_from_files

Domain
detected Domain: r.date

XIOC detected Domain: r.date

extracted_from_files

Domain
detected Domain: r.int

XIOC detected Domain: r.int

extracted_from_files

Domain
detected Domain: r.money

XIOC detected Domain: r.money

extracted_from_files

Domain
detected Domain: a.name

XIOC detected Domain: a.name

extracted_from_files

Domain
detected Domain: w.int

XIOC detected Domain: w.int

extracted_from_files

Domain
detected Domain: w.date

XIOC detected Domain: w.date

extracted_from_files

Domain
detected Domain: developer.mozilla.org

XIOC detected Domain: developer.mozilla.org

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: u.as

XIOC detected Domain: u.as

extracted_from_files

Domain
detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain
detected Domain: s.next

XIOC detected Domain: s.next

extracted_from_files

Domain
detected Domain: n.name

XIOC detected Domain: n.name

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

IP
detected IP: ea::

XIOC detected IP: ea::

extracted_from_files

IP
detected IP: 400::

XIOC detected IP: 400::

extracted_from_files

IP
detected IP: ::d

XIOC detected IP: ::d

extracted_from_files

IP
detected IP: ::e

XIOC detected IP: ::e

extracted_from_files

IP
detected IP: ::0

XIOC detected IP: ::0

extracted_from_files

IP
detected IP: ::c

XIOC detected IP: ::c

extracted_from_files

Domain
detected Domain: object.is

XIOC detected Domain: object.is

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Stashed is a Chrome Web Store extension published by [email protected]. Version 1.0.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 62.47/100 (MEDIUM risk) based on 230 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • High: 27 finding(s)
  • Medium: 203 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Stashed is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions