Is "Extension" on Firefox Add-ons Safe to Install?

alex · firefox · v1.0

Risk Assessment

Analyzed
42.94
out of 100
MEDIUM

420 security findings detected across all analyzers

Firefox extension requesting 4 permissions

Severity Breakdown

0
Critical
132
High
288
Medium
0
Low
0
Info

Finding Categories

132
Malware Signatures
272
IoC Indicators

YARA Rules Matched

8 rules(132 hits)
postinstall file manipulation postinstall system command postinstall network communication postinstall obfuscation postinstall registry modification NoUseWeakRandom postinstall crypto operations postinstall persistence mechanism

Requested Permissions

4 permissions
activeTab
Medium
storage
Low
scripting
Low
*://*.youtube.com/*
Low

Detailed Findings

132 total

YARA Rule Matches

8 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
65
IP Addresses
15
Domains
197
Strings
272

All Indicators · 272

Domain
detected Domain: orderedmodifie.name

XIOC detected Domain: orderedmodifie.name

extracted_from_files

Domain
detected Domain: nav-item.show

XIOC detected Domain: nav-item.show

extracted_from_files

Domain
detected Domain: dropdown-menu.show

XIOC detected Domain: dropdown-menu.show

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/24990

XIOC detected URL: https://github.com/twbs/bootstrap/issues/24990

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

URL
detected URL: https://popper.js.org)')

XIOC detected URL: https://popper.js.org)')

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Window/innerWidth#usage_notes

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Window/innerWidth#usage_notes

extracted_from_files

IP
detected IP: e::bef

XIOC detected IP: e::bef

extracted_from_files

IP
detected IP: e::af

XIOC detected IP: e::af

extracted_from_files

IP
detected IP: ed::

XIOC detected IP: ed::

extracted_from_files

IP
detected IP: e::

XIOC detected IP: e::

extracted_from_files

IP
detected IP: ::f

XIOC detected IP: ::f

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

Domain
detected Domain: bootstrap-grid.min.css.map

XIOC detected Domain: bootstrap-grid.min.css.map

extracted_from_files

Domain
detected Domain: bootstrap.min.css.map

XIOC detected Domain: bootstrap.min.css.map

extracted_from_files

Domain
detected Domain: bootstrap-utilities.css.map

XIOC detected Domain: bootstrap-utilities.css.map

extracted_from_files

Domain
detected Domain: bootstrap-reboot.css.map

XIOC detected Domain: bootstrap-reboot.css.map

extracted_from_files

Domain
detected Domain: bootstrap.css.map

XIOC detected Domain: bootstrap.css.map

extracted_from_files

Domain
detected Domain: bootstrap-grid.css.map

XIOC detected Domain: bootstrap-grid.css.map

extracted_from_files

Domain
detected Domain: bootstrap-reboot.rtl.min.css.map

XIOC detected Domain: bootstrap-reboot.rtl.min.css.map

extracted_from_files

Domain
detected Domain: bootstrap-grid.rtl.min.css.map

XIOC detected Domain: bootstrap-grid.rtl.min.css.map

extracted_from_files

Domain
detected Domain: bootstrap-utilities.min.css.map

XIOC detected Domain: bootstrap-utilities.min.css.map

extracted_from_files

Domain
detected Domain: bootstrap-reboot.rtl.css.map

XIOC detected Domain: bootstrap-reboot.rtl.css.map

extracted_from_files

Domain
detected Domain: bootstrap.rtl.min.css.map

XIOC detected Domain: bootstrap.rtl.min.css.map

extracted_from_files

Domain
detected Domain: bootstrap-grid.rtl.css.map

XIOC detected Domain: bootstrap-grid.rtl.css.map

extracted_from_files

Domain
detected Domain: bootstrap-reboot.min.css.map

XIOC detected Domain: bootstrap-reboot.min.css.map

extracted_from_files

Domain
detected Domain: bootstrap.rtl.css.map

XIOC detected Domain: bootstrap.rtl.css.map

extracted_from_files

Domain
detected Domain: bootstrap.bundle.js.map

XIOC detected Domain: bootstrap.bundle.js.map

extracted_from_files

Domain
detected Domain: bootstrap.esm.min.js.map

XIOC detected Domain: bootstrap.esm.min.js.map

extracted_from_files

Domain
detected Domain: bootstrap.esm.js.map

XIOC detected Domain: bootstrap.esm.js.map

extracted_from_files

Domain
detected Domain: bootstrap.min.js.map

XIOC detected Domain: bootstrap.min.js.map

extracted_from_files

Domain
detected Domain: bootstrap.js.map

XIOC detected Domain: bootstrap.js.map

extracted_from_files

Domain
detected Domain: bootstrap-utilities.rtl.css.map

XIOC detected Domain: bootstrap-utilities.rtl.css.map

extracted_from_files

Domain
detected Domain: bootstrap-utilities.rtl.min.css.map

XIOC detected Domain: bootstrap-utilities.rtl.min.css.map

extracted_from_files

Domain
detected Domain: m.aq

XIOC detected Domain: m.aq

extracted_from_files

Domain
detected Domain: tea60d85ac97f6c93d4d8833a9fc74ea9.91732ad1e91675cb0b8cc0cf077116c7.addons.mozilla.org

XIOC detected Domain: tea60d85ac97f6c93d4d8833a9fc74ea9.91732ad1e91675cb0b8cc0cf077116c7.addons.mozilla.org

extracted_from_files

Domain
detected Domain: content-signature.mozilla.org

XIOC detected Domain: content-signature.mozilla.org

extracted_from_files

Domain
detected Domain: addons.mozilla.org

XIOC detected Domain: addons.mozilla.org

extracted_from_files

Domain
detected Domain: mozilla.com

XIOC detected Domain: mozilla.com

extracted_from_files

Domain
detected Domain: signingca1.addons.mozilla.org

XIOC detected Domain: signingca1.addons.mozilla.org

extracted_from_files

Domain
detected Domain: bootstrap.bundle.min.js.map

XIOC detected Domain: bootstrap.bundle.min.js.map

extracted_from_files

Domain
detected Domain: n.my

XIOC detected Domain: n.my

extracted_from_files

Domain
detected Domain: n.mx

XIOC detected Domain: n.mx

extracted_from_files

Domain
detected Domain: n.gy

XIOC detected Domain: n.gy

extracted_from_files

Domain
detected Domain: bugs.webkit.org

XIOC detected Domain: bugs.webkit.org

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: getbootstrap.com

XIOC detected Domain: getbootstrap.com

extracted_from_files

Domain
detected Domain: n.ps

XIOC detected Domain: n.ps

extracted_from_files

Domain
detected Domain: n.pe

XIOC detected Domain: n.pe

extracted_from_files

Domain
detected Domain: n.pt

XIOC detected Domain: n.pt

extracted_from_files

Domain
detected Domain: n.py

XIOC detected Domain: n.py

extracted_from_files

Domain
detected Domain: n.ms

XIOC detected Domain: n.ms

extracted_from_files

Domain
detected Domain: n.me

XIOC detected Domain: n.me

extracted_from_files

Domain
detected Domain: n.mt

XIOC detected Domain: n.mt

extracted_from_files

Domain
detected Domain: n.link

XIOC detected Domain: n.link

extracted_from_files

Domain
detected Domain: kittygiraudel.com

XIOC detected Domain: kittygiraudel.com

extracted_from_files

Domain
detected Domain: www.a11yproject.com

XIOC detected Domain: www.a11yproject.com

extracted_from_files

Domain
detected Domain: rtlcss.com

XIOC detected Domain: rtlcss.com

extracted_from_files

Domain
detected Domain: rtlstyling.com

XIOC detected Domain: rtlstyling.com

extracted_from_files

Domain
detected Domain: html.spec.whatwg.org

XIOC detected Domain: html.spec.whatwg.org

extracted_from_files

Domain
detected Domain: stackoverflow.com

XIOC detected Domain: stackoverflow.com

extracted_from_files

Domain
detected Domain: textarea.form-control.is

XIOC detected Domain: textarea.form-control.is

extracted_from_files

Domain
detected Domain: form-control.is

XIOC detected Domain: form-control.is

extracted_from_files

Domain
detected Domain: n.bg

XIOC detected Domain: n.bg

extracted_from_files

Domain
detected Domain: n.gap

XIOC detected Domain: n.gap

extracted_from_files

Domain
detected Domain: n.mh

XIOC detected Domain: n.mh

extracted_from_files

Domain
detected Domain: n.mw

XIOC detected Domain: n.mw

extracted_from_files

Domain
detected Domain: n.top

XIOC detected Domain: n.top

extracted_from_files

Domain
detected Domain: form-check-input.is

XIOC detected Domain: form-check-input.is

extracted_from_files

Domain
detected Domain: form-control-color.is

XIOC detected Domain: form-control-color.is

extracted_from_files

Domain
detected Domain: form-select.is

XIOC detected Domain: form-select.is

extracted_from_files

Domain
detected Domain: btn.show

XIOC detected Domain: btn.show

extracted_from_files

Domain
detected Domain: keydown.tab

XIOC detected Domain: keydown.tab

extracted_from_files

Domain
detected Domain: mousedown.bs

XIOC detected Domain: mousedown.bs

extracted_from_files

Domain
detected Domain: backdrop.show

XIOC detected Domain: backdrop.show

extracted_from_files

Domain
detected Domain: offcanvas-xl.show

XIOC detected Domain: offcanvas-xl.show

extracted_from_files

Domain
detected Domain: offcanvas-lg.show

XIOC detected Domain: offcanvas-lg.show

extracted_from_files

Domain
detected Domain: offcanvas-md.show

XIOC detected Domain: offcanvas-md.show

extracted_from_files

Domain
detected Domain: offcanvas-sm.show

XIOC detected Domain: offcanvas-sm.show

extracted_from_files

IP
detected Domain: tooltip.show

XIOC detected Domain: tooltip.show

extracted_from_files

Domain
detected Domain: modal-backdrop.show

XIOC detected Domain: modal-backdrop.show

extracted_from_files

Domain
detected Domain: modal.show

XIOC detected Domain: modal.show

extracted_from_files

Domain
detected Domain: n.is

XIOC detected Domain: n.is

extracted_from_files

Domain
detected Domain: developer.mozilla.org

XIOC detected Domain: developer.mozilla.org

extracted_from_files

Domain
detected Domain: primer.github.io

XIOC detected Domain: primer.github.io

extracted_from_files

Domain
detected Domain: codepen.io

XIOC detected Domain: codepen.io

extracted_from_files

Domain
detected Domain: offcanvas-backdrop.show

XIOC detected Domain: offcanvas-backdrop.show

extracted_from_files

Domain
detected Domain: offcanvas.show

XIOC detected Domain: offcanvas.show

extracted_from_files

Domain
detected Domain: offcanvas-xxl.show

XIOC detected Domain: offcanvas-xxl.show

extracted_from_files

Domain
detected Domain: n.bs

XIOC detected Domain: n.bs

extracted_from_files

IP
detected Domain: n.tooltip.show

XIOC detected Domain: n.tooltip.show

extracted_from_files

Domain
detected Domain: n.modal-backdrop.show

XIOC detected Domain: n.modal-backdrop.show

extracted_from_files

Domain
detected Domain: n.modal.show

XIOC detected Domain: n.modal.show

extracted_from_files

Domain
detected Domain: n.page

XIOC detected Domain: n.page

extracted_from_files

Domain
detected Domain: n.tab

XIOC detected Domain: n.tab

extracted_from_files

Domain
detected Domain: n.dropdown-menu.show

XIOC detected Domain: n.dropdown-menu.show

extracted_from_files

Domain
detected Domain: plugin.name

XIOC detected Domain: plugin.name

extracted_from_files

Domain
detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

Domain
detected Domain: www.quirksmode.org

XIOC detected Domain: www.quirksmode.org

extracted_from_files

Domain
detected Domain: www.charistheo.io

XIOC detected Domain: www.charistheo.io

extracted_from_files

Domain
detected Domain: goo.gl

XIOC detected Domain: goo.gl

extracted_from_files

Domain
detected Domain: n.btn-group.show

XIOC detected Domain: n.btn-group.show

extracted_from_files

Domain
detected Domain: n.offcanvas-backdrop.show

XIOC detected Domain: n.offcanvas-backdrop.show

extracted_from_files

Domain
detected Domain: element.prototype.queryselector.call

XIOC detected Domain: element.prototype.queryselector.call

extracted_from_files

Domain
detected Domain: element.prototype.queryselectorall.call

XIOC detected Domain: element.prototype.queryselectorall.call

extracted_from_files

Domain
detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain
detected Domain: this.data

XIOC detected Domain: this.data

extracted_from_files

Domain
detected Domain: this.constructor.data

XIOC detected Domain: this.constructor.data

extracted_from_files

Domain
detected Domain: fn.call

XIOC detected Domain: fn.call

extracted_from_files

Domain
detected Domain: eventhandler.off

XIOC detected Domain: eventhandler.off

extracted_from_files

Domain
detected Domain: carousel.next

XIOC detected Domain: carousel.next

extracted_from_files

Domain
detected Domain: carousel.to

XIOC detected Domain: carousel.to

extracted_from_files

Domain
detected Domain: data.to

XIOC detected Domain: data.to

extracted_from_files

Domain
detected Domain: this.to

XIOC detected Domain: this.to

extracted_from_files

Domain
detected Domain: eventhandler.one

XIOC detected Domain: eventhandler.one

extracted_from_files

Domain
detected Domain: this.next

XIOC detected Domain: this.next

extracted_from_files

Domain
detected Domain: component.name

XIOC detected Domain: component.name

extracted_from_files

Domain
detected Domain: clientrect.top

XIOC detected Domain: clientrect.top

extracted_from_files

Domain
detected Domain: uadata.brands.map

XIOC detected Domain: uadata.brands.map

extracted_from_files

Domain
detected Domain: state.elements.arrow.style

XIOC detected Domain: state.elements.arrow.style

extracted_from_files

Domain
detected Domain: state.elements.popper.style

XIOC detected Domain: state.elements.popper.style

extracted_from_files

Domain
detected Domain: element.style

XIOC detected Domain: element.style

extracted_from_files

Domain
detected Domain: this.show

XIOC detected Domain: this.show

extracted_from_files

Domain
detected Domain: collapse.show

XIOC detected Domain: collapse.show

extracted_from_files

IP
detected Domain: clippingrect.top

XIOC detected Domain: clippingrect.top

extracted_from_files

Domain
detected Domain: accrect.top

XIOC detected Domain: accrect.top

extracted_from_files

Domain
detected Domain: rect.top

XIOC detected Domain: rect.top

extracted_from_files

Domain
detected Domain: ref.name

XIOC detected Domain: ref.name

extracted_from_files

Domain
detected Domain: currentnode.host

XIOC detected Domain: currentnode.host

extracted_from_files

Domain
detected Domain: element.host

XIOC detected Domain: element.host

extracted_from_files

Domain
detected Domain: next.host

XIOC detected Domain: next.host

extracted_from_files

Domain
detected Domain: current.name

XIOC detected Domain: current.name

extracted_from_files

Domain
detected Domain: modifier.name

XIOC detected Domain: modifier.name

extracted_from_files

Domain
detected Domain: ref2.name

XIOC detected Domain: ref2.name

extracted_from_files

Domain
detected Domain: overflow.top

XIOC detected Domain: overflow.top

extracted_from_files

Domain
detected Domain: paddingobject.top

XIOC detected Domain: paddingobject.top

extracted_from_files

Domain
detected Domain: elementclientrect.top

XIOC detected Domain: elementclientrect.top

extracted_from_files

IP
detected Domain: clippingclientrect.top

XIOC detected Domain: clippingclientrect.top

extracted_from_files

Domain
detected Domain: event.target

XIOC detected Domain: event.target

extracted_from_files

Domain
detected Domain: popper.js.org

XIOC detected Domain: popper.js.org

extracted_from_files

Domain
detected Domain: selectorengine.next

XIOC detected Domain: selectorengine.next

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/24093

XIOC detected URL: https://github.com/twbs/bootstrap/issues/24093

extracted_from_files

Domain
detected Domain: modifier.data

XIOC detected Domain: modifier.data

extracted_from_files

Domain
detected Domain: current.data

XIOC detected Domain: current.data

extracted_from_files

Domain
detected Domain: existing.data

XIOC detected Domain: existing.data

extracted_from_files

Domain
detected Domain: this.constructor.name

XIOC detected Domain: this.constructor.name

extracted_from_files

Domain
detected Domain: activetrigger.click

XIOC detected Domain: activetrigger.click

extracted_from_files

Domain
detected Domain: event2.target

XIOC detected Domain: event2.target

extracted_from_files

URL
detected URL: https://github.com/angular/angular/blob/15.2.8/packages/core/src/sanitization/url_sanitizer.ts#L38

XIOC detected URL: https://github.com/angular/angular/blob/15.2.8/packages/core/src/sanitization/url_sanitizer.ts#L38

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/pull/30562

XIOC detected URL: https://github.com/twbs/bootstrap/pull/30562

extracted_from_files

URL
detected URL: https://popper.js.org)

XIOC detected URL: https://popper.js.org)

extracted_from_files

Domain
detected Domain: instance.show

XIOC detected Domain: instance.show

extracted_from_files

Domain
detected Domain: t.call

XIOC detected Domain: t.call

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: child.id

XIOC detected Domain: child.id

extracted_from_files

Domain
detected Domain: bs.tab

XIOC detected Domain: bs.tab

extracted_from_files

Domain
detected Domain: entry.target.id

XIOC detected Domain: entry.target.id

extracted_from_files

Domain
detected Domain: config.target

XIOC detected Domain: config.target

extracted_from_files

Domain
detected Domain: config.delay.show

XIOC detected Domain: config.delay.show

extracted_from_files

Domain
detected Domain: s.style

XIOC detected Domain: s.style

extracted_from_files

Domain
detected Domain: i.next

XIOC detected Domain: i.next

extracted_from_files

Domain
detected Domain: i.to

XIOC detected Domain: i.to

extracted_from_files

Domain
detected Domain: e.to

XIOC detected Domain: e.to

extracted_from_files

Domain
detected Domain: n.one

XIOC detected Domain: n.one

extracted_from_files

Domain
detected Domain: click.bs.button.data

XIOC detected Domain: click.bs.button.data

extracted_from_files

Domain
detected Domain: n.off

XIOC detected Domain: n.off

extracted_from_files

Domain
detected Domain: i.host

XIOC detected Domain: i.host

extracted_from_files

Domain
detected Domain: t.host

XIOC detected Domain: t.host

extracted_from_files

Domain
detected Domain: n.host

XIOC detected Domain: n.host

extracted_from_files

Domain
detected Domain: t.brands.map

XIOC detected Domain: t.brands.map

extracted_from_files

Domain
detected Domain: n.style

XIOC detected Domain: n.style

extracted_from_files

Domain
detected Domain: e.elements.arrow.style

XIOC detected Domain: e.elements.arrow.style

extracted_from_files

Domain
detected Domain: e.elements.popper.style

XIOC detected Domain: e.elements.popper.style

extracted_from_files

Domain
detected Domain: l.top

XIOC detected Domain: l.top

extracted_from_files

Domain
detected Domain: w.top-c.top

XIOC detected Domain: w.top-c.top

extracted_from_files

Domain
detected Domain: a.top

XIOC detected Domain: a.top

extracted_from_files

Domain
detected Domain: a.bottom-a.top

XIOC detected Domain: a.bottom-a.top

extracted_from_files

Domain
detected Domain: s.top

XIOC detected Domain: s.top

extracted_from_files

Domain
detected Domain: e.top

XIOC detected Domain: e.top

extracted_from_files

Domain
detected Domain: i.top

XIOC detected Domain: i.top

extracted_from_files

Domain
detected Domain: t.target

XIOC detected Domain: t.target

extracted_from_files

Domain
detected Domain: z.next

XIOC detected Domain: z.next

extracted_from_files

Domain
detected Domain: s.name

XIOC detected Domain: s.name

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: i.data

XIOC detected Domain: i.data

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: n.to

XIOC detected Domain: n.to

extracted_from_files

Domain
detected Domain: t.to

XIOC detected Domain: t.to

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: t.target.id

XIOC detected Domain: t.target.id

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: o.show

XIOC detected Domain: o.show

extracted_from_files

Domain
detected Domain: shown.bs.tab

XIOC detected Domain: shown.bs.tab

extracted_from_files

Domain
detected Domain: show.bs.tab

XIOC detected Domain: show.bs.tab

extracted_from_files

Domain
detected Domain: hidden.bs.tab

XIOC detected Domain: hidden.bs.tab

extracted_from_files

Domain
detected Domain: hide.bs.tab

XIOC detected Domain: hide.bs.tab

extracted_from_files

Domain
detected Domain: e.target.id

XIOC detected Domain: e.target.id

extracted_from_files

Domain
detected Domain: click.bs.modal.data

XIOC detected Domain: click.bs.modal.data

extracted_from_files

Domain
detected Domain: n.next

XIOC detected Domain: n.next

extracted_from_files

Domain
detected Domain: k.next

XIOC detected Domain: k.next

extracted_from_files

Domain
detected Domain: j.one

XIOC detected Domain: j.one

extracted_from_files

Domain
detected Domain: j.off

XIOC detected Domain: j.off

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: load.bs.tab

XIOC detected Domain: load.bs.tab

extracted_from_files

Domain
detected Domain: keydown.bs.tab

XIOC detected Domain: keydown.bs.tab

extracted_from_files

Domain
detected Domain: click.bs.tab

XIOC detected Domain: click.bs.tab

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/blob/main/LICENSE)

XIOC detected URL: https://github.com/twbs/bootstrap/blob/main/LICENSE)

extracted_from_files

URL
detected URL: https://getbootstrap.com/)

XIOC detected URL: https://getbootstrap.com/)

extracted_from_files

URL
detected URL: https://github.com/facebook/flow/issues/1414

XIOC detected URL: https://github.com/facebook/flow/issues/1414

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/CSS/Containing_block#identifying_the_containing_block

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/CSS/Containing_block#identifying_the_containing_block

extracted_from_files

URL
detected URL: https://github.com/popperjs/popper-core/issues/837

XIOC detected URL: https://github.com/popperjs/popper-core/issues/837

extracted_from_files

Domain
detected Domain: youtube.com

XIOC detected Domain: youtube.com

extracted_from_files

URL
detected URL: https://github.com/sass/sass/issues/2383#issuecomment-336349172

XIOC detected URL: https://github.com/sass/sass/issues/2383#issuecomment-336349172

extracted_from_files

URL
detected URL: https://github.com/philipwalton/flexbugs#flexbug-4

XIOC detected URL: https://github.com/philipwalton/flexbugs#flexbug-4

extracted_from_files

URL
detected URL: https://github.com/react-bootstrap/react-bootstrap/issues/6039

XIOC detected URL: https://github.com/react-bootstrap/react-bootstrap/issues/6039

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg'

XIOC detected URL: http://www.w3.org/2000/svg'

extracted_from_files

URL
detected URL: https://www.w3.org/TR/WCAG20/#visual-audio-contrast-contrast

XIOC detected URL: https://www.w3.org/TR/WCAG20/#visual-audio-contrast-contrast

extracted_from_files

URL
detected URL: https://bugs.webkit.org/show_bug.cgi?id=178261

XIOC detected URL: https://bugs.webkit.org/show_bug.cgi?id=178261

extracted_from_files

URL
detected URL: https://www.w3.org/TR/mediaqueries-4/#mq-min-max

XIOC detected URL: https://www.w3.org/TR/mediaqueries-4/#mq-min-max

extracted_from_files

Hash
detected MD5 Hash: 91732ad1e91675cb0b8cc0cf077116c7

XIOC detected MD5 Hash: 91732ad1e91675cb0b8cc0cf077116c7

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/19402

XIOC detected URL: https://github.com/twbs/bootstrap/issues/19402

extracted_from_files

URL
detected URL: https://github.com/necolas/normalize.css

XIOC detected URL: https://github.com/necolas/normalize.css

extracted_from_files

URL
detected URL: https://github.com/twbs/rfs/issues/14

XIOC detected URL: https://github.com/twbs/rfs/issues/14

extracted_from_files

URL
detected URL: https://github.com/twbs/rfs/blob/main/LICENSE)

XIOC detected URL: https://github.com/twbs/rfs/blob/main/LICENSE)

extracted_from_files

URL
detected URL: https://rtlstyling.com/posts/rtl-styling#form-inputs

XIOC detected URL: https://rtlstyling.com/posts/rtl-styling#form-inputs

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/11586.

XIOC detected URL: https://github.com/twbs/bootstrap/issues/11586.

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/18842

XIOC detected URL: https://github.com/twbs/bootstrap/issues/18842

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/29712

XIOC detected URL: https://github.com/twbs/bootstrap/issues/29712

extracted_from_files

URL
detected URL: https://html.spec.whatwg.org/multipage/#the-fieldset-and-legend-elements

XIOC detected URL: https://html.spec.whatwg.org/multipage/#the-fieldset-and-legend-elements

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/12359

XIOC detected URL: https://github.com/twbs/bootstrap/issues/12359

extracted_from_files

URL
detected URL: https://stackoverflow.com/a/54997118

XIOC detected URL: https://stackoverflow.com/a/54997118

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/18178

XIOC detected URL: https://github.com/twbs/bootstrap/issues/18178

extracted_from_files

URL
detected URL: https://www.w3.org/TR/2013/NOTE-WCAG20-TECHS-20130905/G1

XIOC detected URL: https://www.w3.org/TR/2013/NOTE-WCAG20-TECHS-20130905/G1

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/25686

XIOC detected URL: https://github.com/twbs/bootstrap/issues/25686

extracted_from_files

URL
detected URL: https://kittygiraudel.com/2016/10/13/css-hide-and-seek/

XIOC detected URL: https://kittygiraudel.com/2016/10/13/css-hide-and-seek/

extracted_from_files

URL
detected URL: https://www.a11yproject.com/posts/2013-01-11-how-to-hide-content/

XIOC detected URL: https://www.a11yproject.com/posts/2013-01-11-how-to-hide-content/

extracted_from_files

URL
detected URL: https://github.com/sass/node-sass/issues/2251

XIOC detected URL: https://github.com/sass/node-sass/issues/2251

extracted_from_files

URL
detected URL: https://rtlcss.com/learn/usage-guide/control-directives/#raw

XIOC detected URL: https://rtlcss.com/learn/usage-guide/control-directives/#raw

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/pull/29124

XIOC detected URL: https://github.com/twbs/bootstrap/pull/29124

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/11655.

XIOC detected URL: https://github.com/twbs/bootstrap/issues/11655.

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/pull/11526.

XIOC detected URL: https://github.com/twbs/bootstrap/pull/11526.

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/34433

XIOC detected URL: https://github.com/twbs/bootstrap/issues/34433

extracted_from_files

URL
detected URL: https://bugs.webkit.org/show_bug.cgi?id=198959

XIOC detected URL: https://bugs.webkit.org/show_bug.cgi?id=198959

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/23307

XIOC detected URL: https://github.com/twbs/bootstrap/issues/23307

extracted_from_files

URL
detected URL: https://codepen.io/miriamsuzanne/full/vYNgodb

XIOC detected URL: https://codepen.io/miriamsuzanne/full/vYNgodb

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/pull/10951.

XIOC detected URL: https://github.com/twbs/bootstrap/pull/10951.

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/Events/click#Safari_Mobile

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/Events/click#Safari_Mobile

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/pull/22740#issuecomment-305868106

XIOC detected URL: https://github.com/twbs/bootstrap/pull/22740#issuecomment-305868106

extracted_from_files

URL
detected URL: https://github.com/sass/sass/issues/1873#issuecomment-152293725

XIOC detected URL: https://github.com/sass/sass/issues/1873#issuecomment-152293725

extracted_from_files

URL
detected URL: https://stackoverflow.com/questions/36247140/why-dont-flex-items-shrink-past-content-size

XIOC detected URL: https://stackoverflow.com/questions/36247140/why-dont-flex-items-shrink-past-content-size

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/28247

XIOC detected URL: https://github.com/twbs/bootstrap/issues/28247

extracted_from_files

URL
detected URL: https://primer.github.io/.

XIOC detected URL: https://primer.github.io/.

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/32273

XIOC detected URL: https://github.com/twbs/bootstrap/issues/32273

extracted_from_files

URL
detected URL: https://www.charistheo.io/blog/2021/02/restart-a-css-animation-with-javascript/#restarting-a-css-animation

XIOC detected URL: https://www.charistheo.io/blog/2021/02/restart-a-css-animation-with-javascript/#restarting-a-css-animation

extracted_from_files

URL
detected URL: https://goo.gl/pxwQGp)

XIOC detected URL: https://goo.gl/pxwQGp)

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/graphs/contributors)

XIOC detected URL: https://github.com/twbs/bootstrap/graphs/contributors)

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/24800

XIOC detected URL: https://github.com/twbs/bootstrap/issues/24800

extracted_from_files

URL
detected URL: https://github.com/twbs/bootstrap/issues/17695

XIOC detected URL: https://github.com/twbs/bootstrap/issues/17695

extracted_from_files

URL
detected URL: https://bugs.webkit.org/show_bug.cgi?id=158342

XIOC detected URL: https://bugs.webkit.org/show_bug.cgi?id=158342

extracted_from_files

URL
detected URL: https://www.quirksmode.org/blog/archives/2014/02/mouse_event_bub.html

XIOC detected URL: https://www.quirksmode.org/blog/archives/2014/02/mouse_event_bub.html

extracted_from_files

URL
detected URL: https://getbootstrap.com/docs/5.3/forms/input-group/

XIOC detected URL: https://getbootstrap.com/docs/5.3/forms/input-group/

extracted_from_files

URL
detected URL: https://github.com/popperjs/popper-core/issues/1078

XIOC detected URL: https://github.com/popperjs/popper-core/issues/1078

extracted_from_files

URL
detected URL: https://github.com/popperjs/popper-core/issues/1223

XIOC detected URL: https://github.com/popperjs/popper-core/issues/1223

extracted_from_files

URL
detected URL: https://popper.js.org)');

XIOC detected URL: https://popper.js.org)');

extracted_from_files

URL
detected URL: https://stackoverflow.com/questions/49875255

XIOC detected URL: https://stackoverflow.com/questions/49875255

extracted_from_files

URL
detected URL: http://addons.mozilla.org/ca/crl.pem0N

XIOC detected URL: http://addons.mozilla.org/ca/crl.pem0N

extracted_from_files

Domain
detected Domain: nav-link.show

XIOC detected Domain: nav-link.show

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Security Analysis Summary

Security Analysis Overview

This extension is a Firefox Add-ons extension published by alex. Version 1.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 42.94/100 (MEDIUM risk) based on 420 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • High: 132 finding(s)
  • Medium: 288 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

This extension is published by alex on the Firefox Add-ons marketplace. The extension has approximately 75 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Frequently Asked Questions