Is Clarie safe to use?

Clarie has a security risk score of 0/100 (MINIMAL risk). Our security analysis detected 0 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Clarie?

Based on our automated security analysis, Clarie presents minimal risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Tracked campaign: searchjacked

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by socket.dev

Chrome Web Store

Clarie

by [email protected] · 6.0K users · 2.8 rating

082ece50-5509-5145-b7ce-63325b1f712b | v1.24.220

MINIMAL risk

Threat verdict

Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed: 3 weeks ago
Version: v1.24.220
Artifact: SHA256 EB3…C4C
Source: Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

61 detail rows

YARA Rule Matches

12 rules

Severity	Rule	Hits	Files	Metadata
LOW	`postinstall file download`	7	newtab/public/font-awesome/css/font-awesome.min.cssnewtab/public/js/weather.jsnewtab/public/js/consent-hover.js +4 more	-
LOW	`SQLInjection`	2	newtab/public/js/vendor/jquery/jquery.min.jsnewtab/public/js/vendor/jquery/jquery-ui.min.js	-
LOW	`NoUseWeakRandom`	2	newtab/public/js/vendor/jquery/jquery.min.jsnewtab/public/js/util.js	-
LOW	`LocalStorageShouldNotBeUsed`	2	newtab/public/js/consent-hover.jsnewtab/public/js/util.js	-
LOW	`postinstall crypto operations`	5	newtab/public/font-awesome/css/font-awesome.min.cssnewtab/public/js/vendor/jquery/jquery-ui.min.js_metadata/verified_contents.json +2 more	-
LOW	`OriginsNotVerified`	1	newtab/public/js/util.js	-
LOW	`postinstall file manipulation`	12	newtab/public/css/jquery-ui.csslib/ext.jsnewtab/public/js/Clarie.js +9 more	-
LOW	`postinstall network communication`	10	lib/listeners.jsnewtab/public/font-awesome/fonts/fontawesome-webfont.woff2newtab/public/js/Clarie.js +7 more	-
LOW	`postinstall environment access`	1	newtab/public/js/consent-hover.js	-
LOW	`postinstall obfuscation`	4	newtab/public/js/vendor/jquery/jquery.min.jslib/ext.jsnewtab/public/js/Clarie.js +1 more	-
LOW	`postinstall system command`	4	newtab/public/font-awesome/css/font-awesome.min.cssnewtab/public/js/consent-hover.jsnewtab/public/js/vendor/jquery/jquery.min.js +1 more	-
LOW	`postinstall persistence mechanism`	2	worker.jslib/ext.js	-

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

Noisy-finding weight

x1.00

Publisher domain

No domain

Missing

Store verification signal

Limited signal

Limited

Extension portfolio

Portfolio

13 evidence rows available.

Finding Categories

Network

YARA Rules Matched

12 rules(52 hits)

postinstall file download SQLInjection NoUseWeakRandom LocalStorageShouldNotBeUsed postinstall crypto operations OriginsNotVerified postinstall file manipulation postinstall network communication postinstall environment access postinstall obfuscation postinstall system command postinstall persistence mechanism

Requested Permissions

6 permissions

Read and modify cookies on all sites

High

tabs

Medium

topSites

Medium

storage

Low

favicon

Low

*://*.clarie-api.net/*

Low

Security Analysis Summary

Security Analysis Overview

Clarie is a Chrome Web Store extension published by [email protected]. Version 1.24.220 has been analyzed by the Risky Plugins security platform, receiving a risk score of 0/100 (MINIMAL risk) based on 0 security findings.

Risk Assessment

This extension presents minimal security concerns. The automated analysis found very few or no issues, suggesting it is suitable for general use.

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Clarie is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 6K users.

Recommendation

Based on the automated security analysis, this extension appears safe for general use. As with any extension, users should review the requested permissions before installation.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

About This Extension

Beautiful New tab to be productive with mesmerizing backgrounds, task manager, weather, task list, and motivational quote of the day. This extension updates your browser New Tab and provides: - Focus of the Day - Tasks - Motivational Quote if the Day - Beatutiful background - Speed test history - TopSites - Newtab Search Results are redirected to Yahoo "Permissions used & reasons: "Read and change your data on a number of websites" For our extension to work, we require access to these websites we own and manage. "Replace the page you see when opening a new tab" This allows us to show you our product - new tab page with free web search. By clicking "Add to Chrome", I accept and agree to installing the Clarie - Chrome extension and setting Chrome™ New Tab search to that provided by Yahoo as described by the Terms of Service (https://clarie.com/terms-of-service/) and Privacy Policy(https://clarie.com/privacy-policy/).

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Edge Translate - Browser Translator | PDF Translation | MV3 | Open Source

[email protected]

CRITICAL 321 users

Intelbras Cloud

[email protected]

CRITICAL 10K users

Edge Translate - Text Selection Translation

[email protected]

CRITICAL 1K users

SlingPlayer for DISH Anywhere

Unknown Developer

CRITICAL 10K users

Berry Adblock - No Ads, More Berries.

[email protected]

CRITICAL

MV3前端助手

[email protected]

CRITICAL 9 users

Clarie

Analysis record

Evidence ledger

NET-FETCH-lib/ext.js-141

NET-JQUERY_AJAX-newtab/public/js/autocomplete.js-16

MANIFEST-SENSITIVE-PERM-TABS

NET-FETCH-newtab/public/js/weather.js-154

NET-FETCH-newtab/public/js/newtab.js-35

NET-JQUERY_AJAX-newtab/public/js/util.js-12

NET-FETCH-newtab/public/js/consent-hover.js-61

NET-JQUERY_AJAX-newtab/public/js/autocomplete.js-67

NET-FETCH-lib/ext.js-214

YARA Rule Matches

Publisher Evidence

Finding Categories

YARA Rules Matched

Requested Permissions

Security Analysis Summary

Security Analysis Overview

Risk Assessment

What Was Analyzed

Developer Information

Recommendation

About This Extension

Frequently Asked Questions

Similar Extensions

Edge Translate - Browser Translator | PDF Translation | MV3 | Open Source

Intelbras Cloud

Edge Translate - Text Selection Translation

SlingPlayer for DISH Anywhere

Berry Adblock - No Ads, More Berries.

MV3前端助手