Is StackExchangeNotifications safe to use?

StackExchangeNotifications has a security risk score of 100/100 (CRITICAL risk). Our security analysis detected 151 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of StackExchangeNotifications?

Based on our automated security analysis, StackExchangeNotifications presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "StackExchangeNotifications" on Microsoft Edge Add-ons Safe to Install?

Name: StackExchangeNotifications
Availability: InStock
Author: Brcontainer

Brcontainer · edge · v1.3.3

This extension has been created for you to stay connected on their StackExchange (like StackOverflow.com) sites when you're doing other activities: # Notifies you of new messages in inbox # Notifies you when your score change (downvotes...

Risk Assessment

Analyzed

100

out of 100

CRITICAL

151 security findings detected across all analyzers

Severity Breakdown

Critical

High

Medium

Low

Info

Finding Categories

Malware Signatures

IoC Indicators

YARA Rules Matched

7 rules(38 hits)

postinstall file manipulation postinstall network communication postinstall crypto operations postinstall persistence mechanism postinstall system command LocalStorageShouldNotBeUsed postinstall obfuscation

Detailed Findings

92 total

YARA Rule Matches

7 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

IP Addresses

Domains

Strings

All Indicators · 59

Domain

detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain

detected Domain: request.chat

XIOC detected Domain: request.chat

extracted_from_files

Domain

detected Domain: sen-gallery.show

XIOC detected Domain: sen-gallery.show

extracted_from_files

Domain

detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

detected IP: ::f

XIOC detected IP: ::f

extracted_from_files

detected IP: d::af

XIOC detected IP: d::af

extracted_from_files

detected IP: e::bef

XIOC detected IP: e::bef

extracted_from_files

detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

Domain

detected Domain: el.style

XIOC detected Domain: el.style

extracted_from_files

Domain

detected Domain: header.top

XIOC detected Domain: header.top

extracted_from_files

Domain

detected Domain: mutation.target

XIOC detected Domain: mutation.target

extracted_from_files

detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

URL

detected URL: http://pt.stackoverflow.com/users

XIOC detected URL: http://pt.stackoverflow.com/users

extracted_from_files

URL

detected URL: https://github.com/brcontainer/stack-exchange-notifications/issues/new

XIOC detected URL: https://github.com/brcontainer/stack-exchange-notifications/issues/new

extracted_from_files

URL

detected URL: https://chat.stackexchange.com/?tab=all&sort=people

XIOC detected URL: https://chat.stackexchange.com/?tab=all&sort=people

extracted_from_files

Domain

detected Domain: stackexchange.com

XIOC detected Domain: stackexchange.com

extracted_from_files

URL

detected URL: http://stackapps.com/q/6455/33963

XIOC detected URL: http://stackapps.com/q/6455/33963

extracted_from_files

URL

detected URL: https://github.com/brcontainer/stack-exchange-notifications

XIOC detected URL: https://github.com/brcontainer/stack-exchange-notifications

extracted_from_files

URL

detected URL: http://stackexchange.com/users/5960/gabe?tab=accounts

XIOC detected URL: http://stackexchange.com/users/5960/gabe?tab=accounts

extracted_from_files

URL

detected URL: http://stackexchange.com/users/3548243/nicael?tab=accounts

XIOC detected URL: http://stackexchange.com/users/3548243/nicael?tab=accounts

extracted_from_files

URL

detected URL: http://stackexchange.com/users/1211516/brasofilo?tab=accounts

XIOC detected URL: http://stackexchange.com/users/1211516/brasofilo?tab=accounts

extracted_from_files

URL

detected URL: https://github.com/brcontainer

XIOC detected URL: https://github.com/brcontainer

extracted_from_files

URL

detected URL: https://stackexchange.com/

XIOC detected URL: https://stackexchange.com/

extracted_from_files

URL

detected URL: https://stackexchange.com/topbar/get-unread-counts

XIOC detected URL: https://stackexchange.com/topbar/get-unread-counts

extracted_from_files

URL

detected URL: https://stackexchange.com/topbar/achievements

XIOC detected URL: https://stackexchange.com/topbar/achievements

extracted_from_files

URL

detected URL: https://stackexchange.com/topbar/inbox

XIOC detected URL: https://stackexchange.com/topbar/inbox

extracted_from_files

URL

detected URL: https://edge.microsoft.com/extensionwebstorebase/v1/crx

XIOC detected URL: https://edge.microsoft.com/extensionwebstorebase/v1/crx

extracted_from_files

URL

detected URL: https://chat.stackoverflow.com/?tab=all&sort=people

XIOC detected URL: https://chat.stackoverflow.com/?tab=all&sort=people

extracted_from_files

Domain

detected Domain: chat.stackoverflow.com

XIOC detected Domain: chat.stackoverflow.com

extracted_from_files

Domain

detected Domain: chat.meta.stackoverflow.com

XIOC detected Domain: chat.meta.stackoverflow.com

extracted_from_files

Domain

detected Domain: chat.meta.stackexchange.com

XIOC detected Domain: chat.meta.stackexchange.com

extracted_from_files

Domain

detected Domain: sstatic.net

XIOC detected Domain: sstatic.net

extracted_from_files

Domain

detected Domain: pt.stackoverflow.com

XIOC detected Domain: pt.stackoverflow.com

extracted_from_files

Other

detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

URL

detected URL: https://github.com/brcontainer/stack-exchange-notification

XIOC detected URL: https://github.com/brcontainer/stack-exchange-notification

extracted_from_files

Domain

detected Domain: askubuntu.com

XIOC detected Domain: askubuntu.com

extracted_from_files

Domain

detected Domain: superuser.com

XIOC detected Domain: superuser.com

extracted_from_files

Domain

detected Domain: serverfault.com

XIOC detected Domain: serverfault.com

extracted_from_files

Domain

detected Domain: stackoverflow.com

XIOC detected Domain: stackoverflow.com

extracted_from_files

Domain

detected Domain: mathoverflow.net

XIOC detected Domain: mathoverflow.net

extracted_from_files

Domain

detected Domain: mathoverflow.com

XIOC detected Domain: mathoverflow.com

extracted_from_files

Domain

detected Domain: chat.stackexchange.com

XIOC detected Domain: chat.stackexchange.com

extracted_from_files

Domain

detected Domain: currentphoto.click

XIOC detected Domain: currentphoto.click

extracted_from_files

Domain

detected Domain: browser.runtime.id

XIOC detected Domain: browser.runtime.id

extracted_from_files

Domain

detected Domain: el.id

XIOC detected Domain: el.id

extracted_from_files

URL

detected URL: http://stackexchange.com/users/1647724/guilherme-nascimento?tab=accounts

XIOC detected URL: http://stackexchange.com/users/1647724/guilherme-nascimento?tab=accounts

extracted_from_files

Domain

detected Domain: headers.date

XIOC detected Domain: headers.date

extracted_from_files

Domain

detected Domain: meta.name

XIOC detected Domain: meta.name

extracted_from_files

Domain

detected Domain: stackapps.com

XIOC detected Domain: stackapps.com

extracted_from_files

Domain

detected Domain: fullbtn.click

XIOC detected Domain: fullbtn.click

extracted_from_files

Domain

detected Domain: previewbtn.click

XIOC detected Domain: previewbtn.click

extracted_from_files

Domain

detected Domain: btn.click

XIOC detected Domain: btn.click

extracted_from_files

Domain

detected Domain: form.post

XIOC detected Domain: form.post

extracted_from_files

Domain

detected Domain: xhr.open

XIOC detected Domain: xhr.open

extracted_from_files

Domain

detected Domain: currentphoto.style.top

XIOC detected Domain: currentphoto.style.top

extracted_from_files

Domain

detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain

detected Domain: div.date

XIOC detected Domain: div.date

extracted_from_files

Domain

detected Domain: request.data

XIOC detected Domain: request.data

extracted_from_files

Domain

detected Domain: yahoo.com.br

XIOC detected Domain: yahoo.com.br

extracted_from_files

Security Analysis Summary

Security Analysis Overview

StackExchangeNotifications is a edge extension published by Brcontainer. Version 1.3.3 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 151 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

High: 38 finding(s)
Medium: 59 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

StackExchangeNotifications is published by Brcontainer on the edge marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Bulk Image Convert

Unknown Developer

CRITICAL

Reverse Image Search

Unknown Developer

CRITICAL

Atomseo Broken and Redirect Links Checker

Unknown Developer

CRITICAL

GPX File Viewer

Unknown Developer

CRITICAL

linkit

Unknown Developer

CRITICAL

Navo

Unknown Developer

CRITICAL

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

Detailed Findings

HASH-fe63c9edcabda63f

HASH-82b113d0532b0b97

HASH-2111bab9d5aa3cb7

HASH-6450baf55d5c29db

HASH-8169a789d09baa65

HASH-54c1031dedef028a

HASH-2d28738f0f5ad813

HASH-db6b29b8f2506f6e

HASH-14af8e889e291466

HASH-a26d0f57e035c3bf

HASH-c175ec18203efe1a

HASH-05b813fcd217db11

HASH-082e1a1618a897b1

HASH-2b476691a3fb279f

HASH-c6639c32b04c69b4

HASH-42b9b09e74bab77d

HASH-a0550e9ed7a41ea1

HASH-9fa73366ad82421c

HASH-c1dfd00b4a4b6d4c

HASH-e91182be29441e70

HASH-275a0baded9d6eac

HASH-56577ab88351c55d

HASH-fb7b144dba64dbd9

HASH-be492c8884afb2f0

HASH-8052e959551ba110

HASH-b1b1e3324e1e0f42

HASH-b8707f7b7827cf6b

HASH-7992dbf26a65eb07

HASH-5755604842af905f

HASH-377a3fe91c2da250

HASH-81d5167171f4564c

HASH-4ffa251f0edc4de7

HASH-3cdd003b8ecb9de7

HASH-38e4e7a34caf4fc9

HASH-5071f8bd4245903d

HASH-7b9391665108adb5

HASH-39551793cb407186

HASH-df73971c47b34c80

HASH-83cfc4dab7fb5ee6

HASH-fcc356194205a008

HASH-cd84bc6902645fff

HASH-bacf5112c9eebb57

HASH-557e5d15967a8383

HASH-4867b7effbaa7101

HASH-9e2d082de827aca4

HASH-05b575d96f3c7142

HASH-d2f5f98edbf0a9c4

HASH-aeb5812626757a63

HASH-7fef97f9ed659228

HASH-b05e6148dd7f5a8d

HASH-dc5d3a323131699b

HASH-603b5887b9273253

HASH-d6495ad3abbb74bf

HASH-2e70dd81be69c859

YARA Rule Matches

postinstall file manipulation

postinstall network communication

postinstall crypto operations

postinstall persistence mechanism

postinstall system command

LocalStorageShouldNotBeUsed

postinstall obfuscation

Indicators of Compromise

All Indicators · 59

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

Frequently Asked Questions

Similar Extensions

Bulk Image Convert

Reverse Image Search