Is fisglobal_MBP_ext safe to use?

fisglobal_MBP_ext has a security risk score of 97.66/100 (CRITICAL risk). Our security analysis detected 2351 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of fisglobal_MBP_ext?

Based on our automated security analysis, fisglobal_MBP_ext presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Chrome Web Store Verified

fisglobal_MBP_ext

by [email protected] · 10 users

24d717a7-a847-531d-9691-decbc71b6c28 | v2026.9.10.103

CRITICAL risk

+13 since v2026.8.27.641

Risk verdict

Do not install

Score-based assessment (critical risk, 98/100). No analyst review available.

Analysis record

Analysed: 1 weeks ago
Version: v2026.9.10.103
Artifact: SHA256 C34…0FF
Source: Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

1000 detail rows

Showing 25 of 122 · highest severity first

YARA Rule Matches

17 rules

Severity	Rule	Hits	Files	Metadata
HIGH	`supply chain sourcemap appended iife`	3	modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/dp/bugfix-6047657-755/dp.jsextension.background/450.extension.background.nocache.jsmodules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/dp/bugfix-069ca95-726/dp.js	-
LOW	`LocalStorageShouldNotBeUsed`	16	modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/ce/bugfix-e4dc9d7-746/ce.jsmodules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/ce/bugfix-ea4f458-719/ce.min.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/survey/wfx-survey-internal.nocache.js +13 more	-
LOW	`DebuggerStatementsShouldNotBeUsed`	1	modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/dp/bugfix-069ca95-726/dp.603.chunk.js	-
LOW	`UntrustedContentShouldNotBeIncluded`	21	modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/workflowengine/workflowengine.nocache.jsmodules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/end/end.nocache.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/start/start.nocache.js +18 more	-
LOW	`NoUseWeakRandom`	47	modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/workflowengine/workflowengine.nocache.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/gw/bugfix-1cd5c6d-707/gw.min.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/obs/bugfix-487c78f-744/obs.js +44 more	-
LOW	`postinstall file download`	82	modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/dp/bugfix-6047657-755/dp.347.chunk.jsmodules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/start/start.nocache.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/font-awesome/font/fontawesome-webfont.ttf +79 more	-
LOW	`SQLInjection`	5	modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/workflowengine/workflowengine.nocache.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/embed/75D1EA532FE5DA23EBB9A2E3F80613F5.cache.jsmodules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/dp/bugfix-069ca95-726/dp.603.chunk.js +2 more	-
LOW	`credential env files`	19	modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/blogs/blogs.nocache.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/deck/deck.nocache.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/workflowengine/workflowengine.nocache.js +16 more	-
LOW	`postinstall persistence mechanism`	48	modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/up/bugfix-5765daa-757/up.909.chunk.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/deck/deck.nocache.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/dp/bugfix-6047657-755/dp.js +45 more	-
LOW	`postinstall obfuscation`	114	modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/tasker/2B6036EA3EAFB6A0B379D2310C471B39.cache.svgmodules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/vd/bugfix-5a3669b-94/vd.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/blogs/2B6036EA3EAFB6A0B379D2310C471B39.cache.svg +111 more	-
LOW	`postinstall system command`	152	modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/end.htmlmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/ce/bugfix-e4dc9d7-746/ce.jsmodules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/dal/bugfix-0af63f9-734/dal.193.chunk.js +149 more	-
LOW	`postinstall crypto operations`	51	modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/ce/bugfix-e4dc9d7-746/ce.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/survey/wfx-survey-internal.nocache.jsmodules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/ce/bugfix-ea4f458-719/ce.min.js +48 more	-
LOW	`OriginsNotVerified`	10	modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/gw/bugfix-d7939ed-680/gw.735.chunk.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/gw/bugfix-1cd5c6d-707/gw.585.chunk.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/dal/bugfix-853dc61-762/dal.165.chunk.js +7 more	-
LOW	`postinstall network communication`	129	modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/tasker/2B6036EA3EAFB6A0B379D2310C471B39.cache.svgmodules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/gw/bugfix-d7939ed-680/gw.min.jsmodules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/up/bugfix-5d0d622-728/up.575.chunk.js +126 more	-
LOW	`postinstall file manipulation`	143	modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/obs/bugfix-487c78f-744/obs.min.jsmodules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/vd/bugfix-5a3669b-94/remoteEntry.jsmodules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/font-awesome/font/FontAwesome.otf +140 more	-
LOW	`postinstall registry modification`	25	modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/workflowengine/workflowengine.nocache.jsextension.foreground/extension.foreground.nocache.jsmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/dp/bugfix-6047657-755/dp.347.chunk.js +22 more	-
LOW	`postinstall environment access`	12	modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/dp/bugfix-069ca95-726/3e117ae2762d584909bd.ttfmodules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/up/bugfix-5765daa-757/3e117ae2762d584909bd.ttfmodules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/dp/bugfix-069ca95-726/7b10ea0f5a0f66e96e83.ttf +9 more	-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

1,338 total

...

Network indicators are queued for lazy loading

Scroll this section into view to load the detailed rows.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

Noisy-finding weight

x1.00

Publisher domain

whatfix.com

Observed

Store verification signal

Limited signal

Limited

Extension portfolio

Portfolio

12 evidence rows available.

Finding Categories

Malware Signatures

Obfuscation

Network

1,338

IoC Indicators

YARA Rules Matched

17 rules(878 hits)

supply chain sourcemap appended iife LocalStorageShouldNotBeUsed DebuggerStatementsShouldNotBeUsed UntrustedContentShouldNotBeIncluded NoUseWeakRandom postinstall file download SQLInjection credential env files postinstall persistence mechanism postinstall obfuscation postinstall system command postinstall crypto operations OriginsNotVerified postinstall network communication postinstall file manipulation postinstall registry modification +1 more

Requested Permissions

4 permissions

webNavigation

Low

storage

Low

alarms

Low

https://*.whatfix.com/*

Low

Security Analysis Summary

Security Analysis Overview

fisglobal_MBP_ext is a Chrome Web Store extension published by [email protected]. Version 2026.9.10.103 has been analyzed by the Risky Plugins security platform, receiving a risk score of 97.66/100 (CRITICAL risk) based on 2351 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

High: 25 finding(s)
Medium: 1438 finding(s)
Low: 888 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

fisglobal_MBP_ext is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 10 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Chrome version history

Risk trend by version

4 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected

Change since first

+22

Change from previous

+13

Versions:

First analyzed version

2026.3.6.711

Mar 27, 2026

Risk range

74 to 98

Across analyzed versions

Latest analyzed version

2026.9.10.103

Sep 12, 2026

Selected version

critical

Version

v2026.9.10.103

1 weeks ago

Risk score

Findings

2359

Change vs previous

+13

Pick any point on the chart to explore that version's code below.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

About This Extension

Whatfix is a digital guidance and engagement platform that helps companies deliver modern and easy onboarding, effective training, and better support to users through contextual content displayed at the time of need. With Whatfix users get a personalized experience of the software application, starting from onboarding and training to continued engagement. You can use Whatfix across all web-based applications and it's available as a simple, easy-to-install browser extension. Personalized User Onboarding: Access personalized and contextual in-app content to make it simple and intuitive for you to use the software application. Walkthroughs guide you, step-by-step for the completion of activities in the system. In-App Help and Guidance: Whatfix eliminates the need for you to approach your support staff for 'how to' queries. Our help content can be personalized based on where you are in the application, to provide you with relevant information whenever you need it. On the Job Learning: Our automatically-generated multi-format content makes for more engaging and effective training compared to traditional training. Videos, pdf, slideshows can be pulled into your LMS with SCORM integration to use as a part of your learning plan.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Whatfix Studio

[email protected]

CRITICAL 10K users

Whatfix for ATOSS_Salesforce

[email protected]

CRITICAL

Whatfix for McDonalds

[email protected]

HIGH 9 users

Whatfix for Midway Staffing

[email protected]

HIGH

randstad_poc

[email protected]

MINIMAL 6 users

BI_POC

[email protected]

MINIMAL

fisglobal_MBP_ext

Analysis record

Evidence ledger

OBFUSCATION-UNICODE_HEAVY-extension.foreground/extension.foreground.nocache.js-44265

OBFUSCATION-UNICODE_HEAVY-modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/workflowengine/workflowengine.nocache.js-63663

OBFUSCATION-UNICODE_HEAVY-modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/workflowengine/workflowengine.nocache.js-62696

OBFUSCATION-UNICODE_HEAVY-modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/survey/survey.nocache.js-19966

OBFUSCATION-UNICODE_HEAVY-modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/end/end.nocache.js-34416

OBFUSCATION-UNICODE_HEAVY-modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/gw/bugfix-d7939ed-680/gw.900.chunk.js-1

OBFUSCATION-UNICODE_HEAVY-modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/dp/bugfix-069ca95-726/dp.603.chunk.js-1

OBFUSCATION-UNICODE_HEAVY-modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/blogs/blogs.nocache.js-30522

OBFUSCATION-UNICODE_HEAVY-modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/start/start.nocache.js-32376

OBFUSCATION-UNICODE_HEAVY-modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/deck/deck.nocache.js-41940

OBFUSCATION-UNICODE_HEAVY-modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/deck/deck.nocache.js-41547

OBFUSCATION-UNICODE_HEAVY-modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/embed/75D1EA532FE5DA23EBB9A2E3F80613F5.cache.js-218334

OBFUSCATION-UNICODE_HEAVY-modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/gw/bugfix-1cd5c6d-707/gw.691.chunk.js-1

OBFUSCATION-UNICODE_HEAVY-modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/end/end.nocache.js-34736

OBFUSCATION-UNICODE_HEAVY-modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/blogs/blogs.nocache.js-30902

OBFUSCATION-UNICODE_HEAVY-modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/tasker/tasker.nocache.js-38441

OBFUSCATION-UNICODE_HEAVY-modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/survey/survey.nocache.js-20175

OBFUSCATION-UNICODE_HEAVY-modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/embed/746651A7FCBFFF2E4FECC607C5E66EB7.cache.js-215396

OBFUSCATION-UNICODE_HEAVY-modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/start/start.nocache.js-32690

OBFUSCATION-UNICODE_HEAVY-modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/modules/up/bugfix-5765daa-757/up.909.chunk.js-1

OBFUSCATION-UNICODE_HEAVY-modules/v26/3484f8c5cae184b07b12103ffad8ef23ea6e287f/tasker/tasker.nocache.js-38809

OBFUSCATION-UNICODE_HEAVY-modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/up/bugfix-5d0d622-728/up.909.chunk.js-1

OBFUSCATION-INVISIBLE_ZERO_WIDTH-modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/modules/dp/bugfix-069ca95-726/dp.603.chunk.js-0

NET-FETCH-extension.background/extension.background.nocache.js-3923

NET-FETCH-modules/v26/6c93929c9d5ff38f8e31e416a1d9c08ca18939a0/workflowengine/workflowengine.nocache.js-61109

YARA Rule Matches

Network Indicators

Publisher Evidence

Finding Categories

YARA Rules Matched

Requested Permissions

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

Risk trend by version

About This Extension

Frequently Asked Questions

Similar Extensions

Whatfix Studio

Whatfix for ATOSS_Salesforce

Whatfix for McDonalds

Whatfix for Midway Staffing

randstad_poc

BI_POC