Is "ZwiftPower ZRS - TESTING" on Firefox Add-ons Safe to Install?

SomebodyHasToDoIt · firefox · v6.0.9

Enhance ZwiftPower with ZRS scores, performance graphs, and racing statistics. View ZRS data in event results, track your progression with interactive charts on profile pages, and analyze ranking points—all with real-time data from Zwift's API.

Risk Assessment

Analyzed
100
out of 100
CRITICAL

157 security findings detected across all analyzers

Firefox extension requesting 8 permissions

Severity Breakdown

0
Critical
114
High
43
Medium
0
Low
0
Info

Finding Categories

113
Malware Signatures
1
Obfuscation
43
Network

YARA Rules Matched

10 rules(113 hits)
postinstall obfuscation postinstall file manipulation postinstall file download postinstall environment access postinstall network communication postinstall system command postinstall crypto operations postinstall persistence mechanism NoUseEval LocalStorageShouldNotBeUsed

Requested Permissions

8 permissions
webRequest

Intercept, modify, and block all network requests

High
webRequestBlocking

Block network requests before they complete

High
storage
Low
unlimitedStorage
Low
scripting
Low
https://us-or-rly101.zwift.com/*
Low
https://www.zwift.com/*
Low
https://zwiftpower.com/*
Low

About This Extension

Enhance ZwiftPower with ZRS scores, performance graphs, and racing statistics. View ZRS data in event results, track your progression with interactive charts on profile pages, and analyze ranking points—all with real-time data from Zwift's API.

Detailed Findings

157 total

YARA Rule Matches

10 rules

Security Analysis Summary

Security Analysis Overview

ZwiftPower ZRS - TESTING is a Firefox Add-ons extension published by SomebodyHasToDoIt. Version 6.0.9 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 157 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 114 finding(s)
  • Medium: 43 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

ZwiftPower ZRS - TESTING is published by SomebodyHasToDoIt on the Firefox Add-ons marketplace. The extension has approximately 12 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions