Is "MediaVue" on Chrome Web Store Safe to Install?

[email protected] ยท chrome ยท v1.0.1

MediaVue is a sleek, professional utility designed for developers, testers, and media enthusiasts. It identifies media assets on any webpage using a hybrid approach of deep DOM scanning and real-time network monitoring. Key Features: - ๐Ÿ” **Intelligent Extraction**: Finds media in HTML5 tags and hidden script heuristics. - ๐ŸŒ **Network Capture**: Identifies HLS (.m3u8) and DASH (.mpd) streams as they load. - ๐Ÿ“‹ **Smart Deduplication**: Merges results from different sources for a clean list. - ๐Ÿ’Ž **Premium UI**: Compact side-panel interface with a modern dark aesthetic. - ๐Ÿ”’ **Privacy First**: All processing is local. No data ever leaves your browser.

Risk Assessment

Analyzed
84.9
out of 100
HIGH

43 security findings detected across all analyzers

Chrome extension requesting 7 permissions

Severity Breakdown

0
Critical
22
High
21
Medium
0
Low
0
Info

Finding Categories

22
Malware Signatures
5
Network
15
IoC Indicators

YARA Rules Matched

6 rules(22 hits)
postinstall file manipulation postinstall file download postinstall network communication postinstall system command postinstall environment access postinstall crypto operations

Requested Permissions

7 permissions
<all_urls>

Access and modify data on every website you visit

Dangerous
webRequest

Intercept, modify, and block all network requests

High
downloads

Manage, modify, and monitor downloads

High
activeTab
Medium
tabs
Medium
scripting
Low
sidePanel
Low

About This Extension

MediaVue is a sleek, professional utility designed for developers, testers, and media enthusiasts. It identifies media assets on any webpage using a hybrid approach of deep DOM scanning and real-time network monitoring. Key Features: - ๐Ÿ” **Intelligent Extraction**: Finds media in HTML5 tags and hidden script heuristics. - ๐ŸŒ **Network Capture**: Identifies HLS (.m3u8) and DASH (.mpd) streams as they load. - ๐Ÿ“‹ **Smart Deduplication**: Merges results from different sources for a clean list. - ๐Ÿ’Ž **Premium UI**: Compact side-panel interface with a modern dark aesthetic. - ๐Ÿ”’ **Privacy First**: All processing is local. No data ever leaves your browser.

Detailed Findings

28 total

YARA Rule Matches

6 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
3
IP Addresses
1
Domains
11
Strings
15

All Indicators ยท 15

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

Domain
detected Domain: chrome.downloads.download

XIOC detected Domain: chrome.downloads.download

extracted_from_files

Domain
detected Domain: chrome.sidepanel.open

XIOC detected Domain: chrome.sidepanel.open

extracted_from_files

Domain
detected Domain: a.download

XIOC detected Domain: a.download

extracted_from_files

Domain
detected Domain: a.click

XIOC detected Domain: a.click

extracted_from_files

URL
detected URL: https://github.com/anilkumarmeena/mediavue

XIOC detected URL: https://github.com/anilkumarmeena/mediavue

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://fonts.googleapis.com/css2?family=Outfit:wght@300;400;500;600;700&display=swap');

XIOC detected URL: https://fonts.googleapis.com/css2?family=Outfit:wght@300;400;500;600;700&display=swap');

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: results.map

XIOC detected Domain: results.map

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: fonts.googleapis.com

XIOC detected Domain: fonts.googleapis.com

extracted_from_files

Domain
detected Domain: filtered.map

XIOC detected Domain: filtered.map

extracted_from_files

Security Analysis Summary

Security Analysis Overview

MediaVue is a Chrome Web Store extension published by [email protected]. Version 1.0.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 84.9/100 (HIGH risk) based on 43 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 22 finding(s)
  • Medium: 21 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

MediaVue is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 5 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions