Is "Work Free" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.0.1

Work-Free is a lightweight, fast issue tracker that runs directly in your browser. Manage your tasks systematically without the need for complex project management tools. Key Features: - Project-based issue management (Todo → In Progress → Done workflow) - 4-level priority system (Urgent, High, Medium, Low) - Parent/child issue relationships (predecessor blocking support) - Inline checklist support with progress tracking - Switch between List view and Kanban board view - Keyboard shortcuts (C: new issue, Ctrl+K: command menu) - Export as Markdown, HTML, or JSON, and import from JSON - Multi-language support (한국어, English, 日本語, 中文简体, 中文繁體, Español, Português) Storage Options: - Local mode: Ready to use immediately after installation, no internet connection required - Cloud mode: Connect your own Supabase project to sync across multiple devices - Copy projects between Local ↔ Cloud storage Why Choose Work-Free: - 100% free, no hidden costs or premium features - No account registration required, just install and start using - Privacy-first, no analytics or tracking code - Works perfectly offline - Clean UI with dark theme Perfect for developers, freelancers, students, small teams, and anyone who needs a simple, fast issue tracker.

Risk Assessment

Analyzed
64.5
out of 100
MEDIUM

240 security findings detected across all analyzers

Chrome extension requesting 2 permissions

Severity Breakdown

0
Critical
0
High
226
Medium
14
Low
0
Info

Finding Categories

1
Network
223
IoC Indicators

YARA Rules Matched

10 rules(14 hits)
postinstall crypto operations postinstall system command postinstall persistence mechanism postinstall obfuscation NoUseWeakRandom SQLInjection postinstall file download postinstall network communication postinstall file manipulation LocalStorageShouldNotBeUsed

Requested Permissions

2 permissions
tabs
Medium
storage
Low

About This Extension

Work-Free is a lightweight, fast issue tracker that runs directly in your browser. Manage your tasks systematically without the need for complex project management tools. Key Features: - Project-based issue management (Todo → In Progress → Done workflow) - 4-level priority system (Urgent, High, Medium, Low) - Parent/child issue relationships (predecessor blocking support) - Inline checklist support with progress tracking - Switch between List view and Kanban board view - Keyboard shortcuts (C: new issue, Ctrl+K: command menu) - Export as Markdown, HTML, or JSON, and import from JSON - Multi-language support (한국어, English, 日本語, 中文简体, 中文繁體, Español, Português) Storage Options: - Local mode: Ready to use immediately after installation, no internet connection required - Cloud mode: Connect your own Supabase project to sync across multiple devices - Copy projects between Local ↔ Cloud storage Why Choose Work-Free: - 100% free, no hidden costs or premium features - No account registration required, just install and start using - Privacy-first, no analytics or tracking code - Works perfectly offline - Clean UI with dark theme Perfect for developers, freelancers, students, small teams, and anyone who needs a simple, fast issue tracker.

Detailed Findings

16 total

YARA Rule Matches

10 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
8
IP Addresses
4
Domains
211
Strings
223

All Indicators · 223

Domain
detected Domain: w.id

XIOC detected Domain: w.id

extracted_from_files

Domain
detected Domain: te.data

XIOC detected Domain: te.data

extracted_from_files

Domain
detected Domain: ka.map

XIOC detected Domain: ka.map

extracted_from_files

Domain
detected Domain: k.total

XIOC detected Domain: k.total

extracted_from_files

Domain
detected Domain: u.id

XIOC detected Domain: u.id

extracted_from_files

Domain
detected Domain: s.memoizedprops.style

XIOC detected Domain: s.memoizedprops.style

extracted_from_files

Domain
detected Domain: u.style

XIOC detected Domain: u.style

extracted_from_files

Domain
detected Domain: developer.mozilla.org

XIOC detected Domain: developer.mozilla.org

extracted_from_files

IP
detected IP: 50::

XIOC detected IP: 50::

extracted_from_files

IP
detected IP: 40::

XIOC detected IP: 40::

extracted_from_files

IP
detected IP: ::bac

XIOC detected IP: ::bac

extracted_from_files

URL
detected URL: https://your-project.supabase.co

XIOC detected URL: https://your-project.supabase.co

extracted_from_files

URL
detected URL: http://localhost:9999

XIOC detected URL: http://localhost:9999

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/LockManager/request

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/LockManager/request

extracted_from_files

URL
detected URL: https://github.com/orgs/supabase/discussions/37217

XIOC detected URL: https://github.com/orgs/supabase/discussions/37217

extracted_from_files

URL
detected URL: http://adv.kongmemo.com

XIOC detected URL: http://adv.kongmemo.com

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

Domain
detected Domain: tn.id

XIOC detected Domain: tn.id

extracted_from_files

Domain
detected Domain: it.id

XIOC detected Domain: it.id

extracted_from_files

Domain
detected Domain: bt.id

XIOC detected Domain: bt.id

extracted_from_files

Domain
detected Domain: at.total

XIOC detected Domain: at.total

extracted_from_files

URL
detected URL: https://tailwindcss.com

XIOC detected URL: https://tailwindcss.com

extracted_from_files

URL
detected URL: https://react.dev/errors/

XIOC detected URL: https://react.dev/errors/

extracted_from_files

Domain
detected Domain: k.name

XIOC detected Domain: k.name

extracted_from_files

Domain
detected Domain: ve.id

XIOC detected Domain: ve.id

extracted_from_files

Domain
detected Domain: ie.issues.map

XIOC detected Domain: ie.issues.map

extracted_from_files

Domain
detected Domain: se.id

XIOC detected Domain: se.id

extracted_from_files

Domain
detected Domain: at.id

XIOC detected Domain: at.id

extracted_from_files

Domain
detected Domain: rt.id

XIOC detected Domain: rt.id

extracted_from_files

Domain
detected Domain: se.name

XIOC detected Domain: se.name

extracted_from_files

Domain
detected Domain: x.name

XIOC detected Domain: x.name

extracted_from_files

Domain
detected Domain: e.select

XIOC detected Domain: e.select

extracted_from_files

Domain
detected Domain: d.download

XIOC detected Domain: d.download

extracted_from_files

Domain
detected Domain: d.click

XIOC detected Domain: d.click

extracted_from_files

Domain
detected Domain: a.map

XIOC detected Domain: a.map

extracted_from_files

Domain
detected Domain: r.click

XIOC detected Domain: r.click

extracted_from_files

Domain
detected Domain: ie.id

XIOC detected Domain: ie.id

extracted_from_files

Domain
detected Domain: ae.id

XIOC detected Domain: ae.id

extracted_from_files

Domain
detected Domain: j.id

XIOC detected Domain: j.id

extracted_from_files

Domain
detected Domain: me.total

XIOC detected Domain: me.total

extracted_from_files

Domain
detected Domain: re.id

XIOC detected Domain: re.id

extracted_from_files

Domain
detected Domain: ae.name

XIOC detected Domain: ae.name

extracted_from_files

Domain
detected Domain: z.id

XIOC detected Domain: z.id

extracted_from_files

Domain
detected Domain: re.name

XIOC detected Domain: re.name

extracted_from_files

Domain
detected Domain: k.map

XIOC detected Domain: k.map

extracted_from_files

Domain
detected Domain: c.id

XIOC detected Domain: c.id

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: e.items.map

XIOC detected Domain: e.items.map

extracted_from_files

Domain
detected Domain: x.target

XIOC detected Domain: x.target

extracted_from_files

Domain
detected Domain: me.target

XIOC detected Domain: me.target

extracted_from_files

Domain
detected Domain: me.id

XIOC detected Domain: me.id

extracted_from_files

Domain
detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain
detected Domain: adv.kongmemo.com

XIOC detected Domain: adv.kongmemo.com

extracted_from_files

Domain
detected Domain: k.id

XIOC detected Domain: k.id

extracted_from_files

Domain
detected Domain: k.target

XIOC detected Domain: k.target

extracted_from_files

Domain
detected Domain: d.now

XIOC detected Domain: d.now

extracted_from_files

Domain
detected Domain: d.id

XIOC detected Domain: d.id

extracted_from_files

Domain
detected Domain: e.old.id

XIOC detected Domain: e.old.id

extracted_from_files

Domain
detected Domain: this.channels.map

XIOC detected Domain: this.channels.map

extracted_from_files

Domain
detected Domain: aa.open

XIOC detected Domain: aa.open

extracted_from_files

IP
detected IP: ::f

XIOC detected IP: ::f

extracted_from_files

Domain
detected Domain: g.id

XIOC detected Domain: g.id

extracted_from_files

Domain
detected Domain: m.id

XIOC detected Domain: m.id

extracted_from_files

Domain
detected Domain: p.map

XIOC detected Domain: p.map

extracted_from_files

Domain
detected Domain: r.target

XIOC detected Domain: r.target

extracted_from_files

Domain
detected Domain: t.new

XIOC detected Domain: t.new

extracted_from_files

Domain
detected Domain: x.id

XIOC detected Domain: x.id

extracted_from_files

Domain
detected Domain: e.map

XIOC detected Domain: e.map

extracted_from_files

Domain
detected Domain: t.old.id

XIOC detected Domain: t.old.id

extracted_from_files

Domain
detected Domain: o.id

XIOC detected Domain: o.id

extracted_from_files

Domain
detected Domain: x.map

XIOC detected Domain: x.map

extracted_from_files

Domain
detected Domain: l.id

XIOC detected Domain: l.id

extracted_from_files

Domain
detected Domain: 1e3-date.now

XIOC detected Domain: 1e3-date.now

extracted_from_files

Domain
detected Domain: a.email

XIOC detected Domain: a.email

extracted_from_files

Domain
detected Domain: a.phone

XIOC detected Domain: a.phone

extracted_from_files

Domain
detected Domain: h.data

XIOC detected Domain: h.data

extracted_from_files

Domain
detected Domain: this.rest

XIOC detected Domain: this.rest

extracted_from_files

Domain
detected Domain: r.storage

XIOC detected Domain: r.storage

extracted_from_files

Domain
detected Domain: this.realtime.channel

XIOC detected Domain: this.realtime.channel

extracted_from_files

Domain
detected Domain: t.channel

XIOC detected Domain: t.channel

extracted_from_files

Domain
detected Domain: z.host

XIOC detected Domain: z.host

extracted_from_files

Domain
detected Domain: y.host

XIOC detected Domain: y.host

extracted_from_files

Domain
detected Domain: signinwithsolana.resources.map

XIOC detected Domain: signinwithsolana.resources.map

extracted_from_files

Domain
detected Domain: m.data

XIOC detected Domain: m.data

extracted_from_files

Domain
detected Domain: m.channel

XIOC detected Domain: m.channel

extracted_from_files

Domain
detected Domain: y.data

XIOC detected Domain: y.data

extracted_from_files

Domain
detected Domain: i.id

XIOC detected Domain: i.id

extracted_from_files

Domain
detected Domain: b.id

XIOC detected Domain: b.id

extracted_from_files

Domain
detected Domain: h.name

XIOC detected Domain: h.name

extracted_from_files

Domain
detected Domain: b.data

XIOC detected Domain: b.data

extracted_from_files

Domain
detected Domain: h.id

XIOC detected Domain: h.id

extracted_from_files

Domain
detected Domain: d.storage

XIOC detected Domain: d.storage

extracted_from_files

Domain
detected Domain: this.storage

XIOC detected Domain: this.storage

extracted_from_files

Domain
detected Domain: a.id

XIOC detected Domain: a.id

extracted_from_files

Domain
detected Domain: c.name

XIOC detected Domain: c.name

extracted_from_files

Domain
detected Domain: l.name

XIOC detected Domain: l.name

extracted_from_files

Domain
detected Domain: d.rp.id

XIOC detected Domain: d.rp.id

extracted_from_files

Domain
detected Domain: r.id

XIOC detected Domain: r.id

extracted_from_files

Domain
detected Domain: y.id

XIOC detected Domain: y.id

extracted_from_files

Domain
detected Domain: p.id

XIOC detected Domain: p.id

extracted_from_files

Domain
detected Domain: a.download

XIOC detected Domain: a.download

extracted_from_files

Domain
detected Domain: i.search

XIOC detected Domain: i.search

extracted_from_files

Domain
detected Domain: a.search

XIOC detected Domain: a.search

extracted_from_files

Domain
detected Domain: lt.post

XIOC detected Domain: lt.post

extracted_from_files

Domain
detected Domain: c.new

XIOC detected Domain: c.new

extracted_from_files

Domain
detected Domain: a.page

XIOC detected Domain: a.page

extracted_from_files

Domain
detected Domain: y.total

XIOC detected Domain: y.total

extracted_from_files

Domain
detected Domain: a.properties

XIOC detected Domain: a.properties

extracted_from_files

Domain
detected Domain: data.properties

XIOC detected Domain: data.properties

extracted_from_files

Domain
detected Domain: a.name

XIOC detected Domain: a.name

extracted_from_files

Domain
detected Domain: i.map

XIOC detected Domain: i.map

extracted_from_files

Domain
detected Domain: y.map

XIOC detected Domain: y.map

extracted_from_files

Domain
detected Domain: r.download

XIOC detected Domain: r.download

extracted_from_files

Domain
detected Domain: c.map

XIOC detected Domain: c.map

extracted_from_files

Domain
detected Domain: r.new

XIOC detected Domain: r.new

extracted_from_files

Domain
detected Domain: a.next

XIOC detected Domain: a.next

extracted_from_files

Domain
detected Domain: e.new

XIOC detected Domain: e.new

extracted_from_files

Domain
detected Domain: qe.call

XIOC detected Domain: qe.call

extracted_from_files

Domain
detected Domain: a.data

XIOC detected Domain: a.data

extracted_from_files

Domain
detected Domain: i.name

XIOC detected Domain: i.name

extracted_from_files

Domain
detected Domain: data.namespaces.map

XIOC detected Domain: data.namespaces.map

extracted_from_files

Domain
detected Domain: c.metas.map

XIOC detected Domain: c.metas.map

extracted_from_files

Domain
detected Domain: i.channel

XIOC detected Domain: i.channel

extracted_from_files

Domain
detected Domain: l.map

XIOC detected Domain: l.map

extracted_from_files

Domain
detected Domain: an.channel

XIOC detected Domain: an.channel

extracted_from_files

Domain
detected Domain: v.id

XIOC detected Domain: v.id

extracted_from_files

Domain
detected Domain: y.name

XIOC detected Domain: y.name

extracted_from_files

Domain
detected Domain: r.data

XIOC detected Domain: r.data

extracted_from_files

Domain
detected Domain: d.map

XIOC detected Domain: d.map

extracted_from_files

Domain
detected Domain: this.channel

XIOC detected Domain: this.channel

extracted_from_files

Domain
detected Domain: r.events

XIOC detected Domain: r.events

extracted_from_files

Domain
detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain
detected Domain: b.map

XIOC detected Domain: b.map

extracted_from_files

Domain
detected Domain: w.map

XIOC detected Domain: w.map

extracted_from_files

Domain
detected Domain: m.map

XIOC detected Domain: m.map

extracted_from_files

Domain
detected Domain: i.date

XIOC detected Domain: i.date

extracted_from_files

Domain
detected Domain: i.int

XIOC detected Domain: i.int

extracted_from_files

Domain
detected Domain: i.money

XIOC detected Domain: i.money

extracted_from_files

Domain
detected Domain: p.name

XIOC detected Domain: p.name

extracted_from_files

Domain
detected Domain: ze.int

XIOC detected Domain: ze.int

extracted_from_files

Domain
detected Domain: ze.date

XIOC detected Domain: ze.date

extracted_from_files

Domain
detected Domain: ze.money

XIOC detected Domain: ze.money

extracted_from_files

Domain
detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain
detected Domain: d.name

XIOC detected Domain: d.name

extracted_from_files

Domain
detected Domain: b.name

XIOC detected Domain: b.name

extracted_from_files

Domain
detected Domain: not.in

XIOC detected Domain: not.in

extracted_from_files

Domain
detected Domain: r.call

XIOC detected Domain: r.call

extracted_from_files

Domain
detected Domain: i.open

XIOC detected Domain: i.open

extracted_from_files

Domain
detected Domain: r.name

XIOC detected Domain: r.name

extracted_from_files

Domain
detected Domain: status.in

XIOC detected Domain: status.in

extracted_from_files

Domain
detected Domain: your-project.supabase.co

XIOC detected Domain: your-project.supabase.co

extracted_from_files

Domain
detected Domain: edit.save

XIOC detected Domain: edit.save

extracted_from_files

Domain
detected Domain: project.select

XIOC detected Domain: project.select

extracted_from_files

Domain
detected Domain: layout.help

XIOC detected Domain: layout.help

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain
detected Domain: object.prototype.propertyisenumerable.call

XIOC detected Domain: object.prototype.propertyisenumerable.call

extracted_from_files

Domain
detected Domain: s.data

XIOC detected Domain: s.data

extracted_from_files

Domain
detected Domain: t.as

XIOC detected Domain: t.as

extracted_from_files

Domain
detected Domain: n.media

XIOC detected Domain: n.media

extracted_from_files

Domain
detected Domain: s.media

XIOC detected Domain: s.media

extracted_from_files

Domain
detected Domain: jr.call

XIOC detected Domain: jr.call

extracted_from_files

Domain
detected Domain: this.next

XIOC detected Domain: this.next

extracted_from_files

Domain
detected Domain: u.info

XIOC detected Domain: u.info

extracted_from_files

Domain
detected Domain: ps.next

XIOC detected Domain: ps.next

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: n.target

XIOC detected Domain: n.target

extracted_from_files

Domain
detected Domain: z.id-p.id

XIOC detected Domain: z.id-p.id

extracted_from_files

Domain
detected Domain: performance.now

XIOC detected Domain: performance.now

extracted_from_files

Domain
detected Domain: ea.open

XIOC detected Domain: ea.open

extracted_from_files

Domain
detected Domain: o.target

XIOC detected Domain: o.target

extracted_from_files

Domain
detected Domain: s.is

XIOC detected Domain: s.is

extracted_from_files

Domain
detected Domain: e.events

XIOC detected Domain: e.events

extracted_from_files

Domain
detected Domain: n.property

XIOC detected Domain: n.property

extracted_from_files

Domain
detected Domain: y.media

XIOC detected Domain: y.media

extracted_from_files

Domain
detected Domain: y.as

XIOC detected Domain: y.as

extracted_from_files

Domain
detected Domain: h.now

XIOC detected Domain: h.now

extracted_from_files

Domain
detected Domain: b.top

XIOC detected Domain: b.top

extracted_from_files

Domain
detected Domain: u.events

XIOC detected Domain: u.events

extracted_from_files

Domain
detected Domain: qe.next

XIOC detected Domain: qe.next

extracted_from_files

Domain
detected Domain: s.data.map

XIOC detected Domain: s.data.map

extracted_from_files

Domain
detected Domain: r.next

XIOC detected Domain: r.next

extracted_from_files

Domain
detected Domain: o.data

XIOC detected Domain: o.data

extracted_from_files

Domain
detected Domain: t.events

XIOC detected Domain: t.events

extracted_from_files

Domain
detected Domain: n.compare

XIOC detected Domain: n.compare

extracted_from_files

Domain
detected Domain: u.next

XIOC detected Domain: u.next

extracted_from_files

Domain
detected Domain: n.next

XIOC detected Domain: n.next

extracted_from_files

Domain
detected Domain: s.next

XIOC detected Domain: s.next

extracted_from_files

Domain
detected Domain: m.next

XIOC detected Domain: m.next

extracted_from_files

Domain
detected Domain: f.call

XIOC detected Domain: f.call

extracted_from_files

Domain
detected Domain: l.next

XIOC detected Domain: l.next

extracted_from_files

Domain
detected Domain: ne.next

XIOC detected Domain: ne.next

extracted_from_files

Domain
detected Domain: g.next

XIOC detected Domain: g.next

extracted_from_files

Domain
detected Domain: e.next

XIOC detected Domain: e.next

extracted_from_files

Domain
detected Domain: fn.next

XIOC detected Domain: fn.next

extracted_from_files

Domain
detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

Domain
detected Domain: k.next

XIOC detected Domain: k.next

extracted_from_files

Domain
detected Domain: se.call

XIOC detected Domain: se.call

extracted_from_files

Domain
detected Domain: t.next

XIOC detected Domain: t.next

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Domain
detected Domain: object.is

XIOC detected Domain: object.is

extracted_from_files

Domain
detected Domain: t.target

XIOC detected Domain: t.target

extracted_from_files

Domain
detected Domain: o.next

XIOC detected Domain: o.next

extracted_from_files

Domain
detected Domain: f.next

XIOC detected Domain: f.next

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: s.name

XIOC detected Domain: s.name

extracted_from_files

Domain
detected Domain: e.style

XIOC detected Domain: e.style

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: n.name

XIOC detected Domain: n.name

extracted_from_files

Domain
detected Domain: o.name

XIOC detected Domain: o.name

extracted_from_files

Domain
detected Domain: this.target

XIOC detected Domain: this.target

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: q.call

XIOC detected Domain: q.call

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: zs.call

XIOC detected Domain: zs.call

extracted_from_files

Domain
detected Domain: o.call

XIOC detected Domain: o.call

extracted_from_files

Domain
detected Domain: u.call

XIOC detected Domain: u.call

extracted_from_files

Domain
detected Domain: v.call

XIOC detected Domain: v.call

extracted_from_files

Domain
detected Domain: re.target

XIOC detected Domain: re.target

extracted_from_files

Domain
detected Domain: be.data

XIOC detected Domain: be.data

extracted_from_files

Domain
detected Domain: h.call

XIOC detected Domain: h.call

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Work Free is a Chrome Web Store extension published by [email protected]. Version 1.0.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 64.5/100 (MEDIUM risk) based on 240 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • Medium: 226 finding(s)
  • Low: 14 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Work Free is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 6 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions