Is freetree - plant trees for free safe to use?

freetree - plant trees for free has a security risk score of 100/100 (CRITICAL risk). Our security analysis detected 246 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of freetree - plant trees for free?

Based on our automated security analysis, freetree - plant trees for free presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "freetree - plant trees for free" on Microsoft Edge Add-ons Safe to Install?

Name: freetree - plant trees for free
Availability: InStock
Author: Ecosia GmbH

Ecosia GmbH · edge · v4.2.6

With freetree - powered by Ecosia, online shopping turns into a tree planting campaign - free of charge and with just 1 click! 👍 Why install freetree?👍 💫🌱 With freetree you can plant trees effortlessly and for free, while shopping...

Risk Assessment

Analyzed

100

out of 100

CRITICAL

246 security findings detected across all analyzers

Severity Breakdown

Critical

113

High

Medium

Low

Info

Finding Categories

113

Malware Signatures

Network

YARA Rules Matched

11 rules(113 hits)

postinstall file manipulation postinstall obfuscation postinstall network communication postinstall system command NoUseWeakRandom postinstall crypto operations SQLInjection postinstall persistence mechanism postinstall file download UntrustedContentShouldNotBeIncluded credential env files

Detailed Findings

246 total

YARA Rule Matches

11 rules

Security Analysis Summary

Security Analysis Overview

freetree - plant trees for free is a edge extension published by Ecosia GmbH. Version 4.2.6 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 246 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

High: 113 finding(s)
Medium: 12 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

freetree - plant trees for free is published by Ecosia GmbH on the edge marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

iCIMS Browser Extension

Unknown Developer

CRITICAL

Review Bookmarks

Unknown Developer

CRITICAL

Torrent Scanner

Unknown Developer

CRITICAL

MeddleMonkey

Unknown Developer

CRITICAL

Quicker Connector

Unknown Developer

CRITICAL

Mavin plugin: A Content Integrity Movement

Unknown Developer

CRITICAL

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

Detailed Findings

NET-FETCH-data/js/LomUtils.class.js-805

NET-FETCH-data/js/background/LomApi.class.js-600

NET-XMLHTTPREQUEST-data/js/LomUtils.class.js-728

NET-FETCH-data/js/background/LomApi.class.js-481

NET-FETCH-data/js/background/LomApi.class.js-318

NET-XMLHTTPREQUEST-data/js/LomUtils.class.js-545

NET-FETCH-data/js/LomUtils.class.js-562

NET-FETCH-data/js/background/LomApi.class.js-260

NET-FETCH-data/js/LomUtils.class.js-687

NET-FETCH-data/js/background/LomApi.class.js-206

NET-FETCH-data/js/background/LomApi.class.js-405

NET-FETCH-data/js/LomUtils.class.js-795

HASH-e4ea3e0709525a21

HASH-4b2d7fea717b9f11

HASH-f417e9b06e57cdc9

HASH-f0fad2acd4019e3a

HASH-26036c8adfd5e1f7

HASH-8c1bc59e5c658a66

HASH-3012806a6b541ca6

HASH-e67d272134e893b4

HASH-72aa85ffd55d788d

HASH-517a376dc71e0db9

HASH-29850469fe504ba5

HASH-cd5075fbe890f93a

HASH-432f98fc27d9b092

HASH-e6997f451bbf8012

HASH-1eb606d7b1b53b5e

HASH-744ac9c98d476418

HASH-53176d790d488ec8

HASH-63c3a6a99ea0d771

HASH-a7b045aee218f37a

HASH-ff37a54b9350823b

HASH-f345db3fc0a6d1a2

HASH-fe396af0b138fe29

HASH-827f746fb5f9d1ef

HASH-b294753414a5adda

HASH-7caf0664ceb3bbcf

HASH-6616363205165e29

HASH-c4f2a75a5d26a997

HASH-cffa472ae5f9433e

HASH-9ae2da663d643420

HASH-827f746fb5f9d1ef

HASH-36eef72bad8c09c6

HASH-1c5e1fe589f55c46

HASH-e4ae6826d233e0f9

HASH-37de32d4945784c4

HASH-7164a212fb4df27b

HASH-2d1fa991986b4679

HASH-76ad0b97b11e8b96

HASH-39069bc1bbd3dab0

HASH-6638638fb4a2299c

HASH-44ef5063da1c1690

HASH-14e0d49c833cd086

HASH-ff5877d19ffb5dbd

HASH-074850e4da1f9995

HASH-3127007c16221f7d

HASH-fc030ab1d26b9709

HASH-906d081df5c728e8

HASH-411e1299b770f6f6

HASH-6cffa9533cc7fe9b

HASH-01ab229245a257c3

HASH-7cca2bf6ba5af1fa

HASH-276c7445a65f6964

HASH-a394c5a08c90d818

HASH-6ea17afa6186b262

HASH-941a7c8a2496af22

HASH-bd77445abef6bf2a

HASH-a1e254bf8deb4b5f

HASH-432f98fc27d9b092

HASH-315695f65dcfdfb9

HASH-593142fbc7fa5aed

HASH-d02c5cb70f78809f

HASH-3497477cb39ee95c

HASH-74f6d9474cd65a81

HASH-3898439a45dc86a5