Is "QuickBox – Fast Productivity Panel" on Chrome Web Store Safe to Install?

[email protected] · chrome · v0.1.4

QuickBox – Capture Anything. Organize Later. QuickBox is a fast, all-in-one Web Clipper and productivity panel for your browser. Save notes, selected text, links, screenshots, and tasks from anywhere on the web — instantly, without breaking your flow. If you already organize information elsewhere, QuickBox is the missing first step: capture everything at the moment it matters, then organize it later. SAVE ANYTHING FROM THE WEB — IN ONE CLICK With QuickBox you can: Save selected text from any website Write quick notes Capture screenshots Save links Create tasks Schedule items to specific days Organize everything into folders All directly from your browser — no context switching. DESIGNED FOR SPEED & ZERO FRICTION QuickBox is built for moments when: • you’re researching • reading articles • watching videos • working • learning • or just don’t want to forget something Capture now. Decide later. STAY ORGANIZED WITHOUT THINKING ABOUT IT Powerful search Folders & subfolders Pin important items Calendar view Central dashboard for everything you saved Your ideas, research, and tasks — always one click away. FREE & PREMIUM Free plan includes: Notes, selections, links & tasks Daily screenshot limit Folder limit Premium unlocks: Unlimited items Unlimited screenshots Unlimited folders Advanced productivity without limits. WHO IS QUICKBOX FOR? Students & researchers Developers & designers Knowledge workers Creators & writers Anyone using note-taking, task, or organization tools Anyone who wants a second brain inside the browser WHY QUICKBOX? Because the fastest productivity tool is the one you actually use. QuickBox lives where your work already happens: the browser. Happy capturing PRIVACY & DATA USAGE QuickBox saves notes, links, selected text, screenshots and tasks only when you explicitly click a button. Screenshots and selected text are captured only after user action and are stored locally on your device by default. Payments are handled externally by Stripe after user confirmation. Account login is optional and used only for Premium activation and optional cloud sync.

Risk Assessment

Analyzed
84.94
out of 100
HIGH

205 security findings detected across all analyzers

Chrome extension requesting 7 permissions

Severity Breakdown

0
Critical
0
High
142
Medium
63
Low
0
Info

Finding Categories

7
Network
135
IoC Indicators

YARA Rules Matched

10 rules(63 hits)
postinstall network communication postinstall file manipulation postinstall system command postinstall obfuscation LocalStorageShouldNotBeUsed NoUseWeakRandom postinstall crypto operations postinstall persistence mechanism postinstall file download AlertStatementsShouldNotBeUsed

Requested Permissions

7 permissions
activeTab
Medium
notifications
Low
alarms
Low
storage
Low
scripting
Low
contextMenus
Low
https://afkvfuhgdnbeygmrazbg.supabase.co/*
Low

About This Extension

QuickBox – Capture Anything. Organize Later. QuickBox is a fast, all-in-one Web Clipper and productivity panel for your browser. Save notes, selected text, links, screenshots, and tasks from anywhere on the web — instantly, without breaking your flow. If you already organize information elsewhere, QuickBox is the missing first step: capture everything at the moment it matters, then organize it later. SAVE ANYTHING FROM THE WEB — IN ONE CLICK With QuickBox you can: Save selected text from any website Write quick notes Capture screenshots Save links Create tasks Schedule items to specific days Organize everything into folders All directly from your browser — no context switching. DESIGNED FOR SPEED & ZERO FRICTION QuickBox is built for moments when: • you’re researching • reading articles • watching videos • working • learning • or just don’t want to forget something Capture now. Decide later. STAY ORGANIZED WITHOUT THINKING ABOUT IT Powerful search Folders & subfolders Pin important items Calendar view Central dashboard for everything you saved Your ideas, research, and tasks — always one click away. FREE & PREMIUM Free plan includes: Notes, selections, links & tasks Daily screenshot limit Folder limit Premium unlocks: Unlimited items Unlimited screenshots Unlimited folders Advanced productivity without limits. WHO IS QUICKBOX FOR? Students & researchers Developers & designers Knowledge workers Creators & writers Anyone using note-taking, task, or organization tools Anyone who wants a second brain inside the browser WHY QUICKBOX? Because the fastest productivity tool is the one you actually use. QuickBox lives where your work already happens: the browser. Happy capturing PRIVACY & DATA USAGE QuickBox saves notes, links, selected text, screenshots and tasks only when you explicitly click a button. Screenshots and selected text are captured only after user action and are stored locally on your device by default. Payments are handled externally by Stripe after user confirmation. Account login is optional and used only for Premium activation and optional cloud sync.

Detailed Findings

70 total

YARA Rule Matches

10 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
12
IP Addresses
10
Domains
114
Strings
135

All Indicators · 135

Domain
detected Domain: e.int

XIOC detected Domain: e.int

extracted_from_files

Domain
detected Domain: result.data

XIOC detected Domain: result.data

extracted_from_files

URL
detected URL: https://afkvfuhgdnbeygmrazbg.supabase.co/functions/v1/get-plan

XIOC detected URL: https://afkvfuhgdnbeygmrazbg.supabase.co/functions/v1/get-plan

extracted_from_files

URL
detected URL: https://afkvfuhgdnbeygmrazbg.supabase.co/auth/v1/user

XIOC detected URL: https://afkvfuhgdnbeygmrazbg.supabase.co/auth/v1/user

extracted_from_files

Domain
detected Domain: editorrect.top

XIOC detected Domain: editorrect.top

extracted_from_files

Domain
detected Domain: toolbar-action.is

XIOC detected Domain: toolbar-action.is

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

IP
detected IP: d::af

XIOC detected IP: d::af

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

IP
detected IP: ed::af

XIOC detected IP: ed::af

extracted_from_files

IP
detected IP: ee::

XIOC detected IP: ee::

extracted_from_files

Domain
detected Domain: indexeddb.open

XIOC detected Domain: indexeddb.open

extracted_from_files

Domain
detected Domain: user.email

XIOC detected Domain: user.email

extracted_from_files

Domain
detected Domain: user.id

XIOC detected Domain: user.id

extracted_from_files

Domain
detected Domain: overlay.style

XIOC detected Domain: overlay.style

extracted_from_files

Domain
detected Domain: rect.top

XIOC detected Domain: rect.top

extracted_from_files

Domain
detected Domain: box.style

XIOC detected Domain: box.style

extracted_from_files

IP
detected IP: e::

XIOC detected IP: e::

extracted_from_files

Domain
detected Domain: data.is

XIOC detected Domain: data.is

extracted_from_files

Domain
detected Domain: afkvfuhgdnbeygmrazbg.supabase.co

XIOC detected Domain: afkvfuhgdnbeygmrazbg.supabase.co

extracted_from_files

Domain
detected Domain: db-cal-day.today

XIOC detected Domain: db-cal-day.today

extracted_from_files

Domain
detected Domain: item.id

XIOC detected Domain: item.id

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

URL
detected URL: https://afkvfuhgdnbeygmrazbg.functions.supabase.co/create-checkout-session

XIOC detected URL: https://afkvfuhgdnbeygmrazbg.functions.supabase.co/create-checkout-session

extracted_from_files

URL
detected URL: https://quickbox-privacy.netlify.app/

XIOC detected URL: https://quickbox-privacy.netlify.app/

extracted_from_files

URL
detected URL: https://chrome.google.com/webstore

XIOC detected URL: https://chrome.google.com/webstore

extracted_from_files

URL
detected URL: https://open.spotify.com

XIOC detected URL: https://open.spotify.com

extracted_from_files

URL
detected URL: https://afkvfuhgdnbeygmrazbg.supabase.co

XIOC detected URL: https://afkvfuhgdnbeygmrazbg.supabase.co

extracted_from_files

URL
detected URL: https://www.jsdelivr.com/using-sri-with-dynamic-files

XIOC detected URL: https://www.jsdelivr.com/using-sri-with-dynamic-files

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/LockManager/request

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/LockManager/request

extracted_from_files

URL
detected URL: http://localhost:9999

XIOC detected URL: http://localhost:9999

extracted_from_files

Domain
detected Domain: status-pill.free

XIOC detected Domain: status-pill.free

extracted_from_files

IP
detected Domain: plan-chip.best

XIOC detected Domain: plan-chip.best

extracted_from_files

Domain
detected Domain: it.id

XIOC detected Domain: it.id

extracted_from_files

Domain
detected Domain: s.target

XIOC detected Domain: s.target

extracted_from_files

Domain
detected Domain: task-check.is

XIOC detected Domain: task-check.is

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://afkvfuhgdnbeygmrazbg.supabase.co/*

XIOC detected URL: https://afkvfuhgdnbeygmrazbg.supabase.co/*

extracted_from_files

Domain
detected Domain: this.realtime.channel

XIOC detected Domain: this.realtime.channel

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: e.open

XIOC detected Domain: e.open

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain
detected Domain: btn.mini

XIOC detected Domain: btn.mini

extracted_from_files

Domain
detected Domain: l.id

XIOC detected Domain: l.id

extracted_from_files

Domain
detected Domain: editingtask.id

XIOC detected Domain: editingtask.id

extracted_from_files

Domain
detected Domain: e.map

XIOC detected Domain: e.map

extracted_from_files

Domain
detected Domain: r.next

XIOC detected Domain: r.next

extracted_from_files

Domain
detected Domain: u.next

XIOC detected Domain: u.next

extracted_from_files

Domain
detected Domain: u.id

XIOC detected Domain: u.id

extracted_from_files

Domain
detected Domain: s.download

XIOC detected Domain: s.download

extracted_from_files

Domain
detected Domain: t.download

XIOC detected Domain: t.download

extracted_from_files

Domain
detected Domain: this.rest

XIOC detected Domain: this.rest

extracted_from_files

Domain
detected Domain: h.id

XIOC detected Domain: h.id

extracted_from_files

Domain
detected Domain: u.data

XIOC detected Domain: u.data

extracted_from_files

Domain
detected Domain: t.new

XIOC detected Domain: t.new

extracted_from_files

Domain
detected Domain: this.channels.map

XIOC detected Domain: this.channels.map

extracted_from_files

Domain
detected Domain: i.open

XIOC detected Domain: i.open

extracted_from_files

Domain
detected Domain: c.open

XIOC detected Domain: c.open

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: r.map

XIOC detected Domain: r.map

extracted_from_files

Domain
detected Domain: this.channel

XIOC detected Domain: this.channel

extracted_from_files

Domain
detected Domain: t.events

XIOC detected Domain: t.events

extracted_from_files

Domain
detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: s.map

XIOC detected Domain: s.map

extracted_from_files

Domain
detected Domain: r.metas.map

XIOC detected Domain: r.metas.map

extracted_from_files

Domain
detected Domain: e.date

XIOC detected Domain: e.date

extracted_from_files

Domain
detected Domain: afkvfuhgdnbeygmrazbg.functions.supabase.co

XIOC detected Domain: afkvfuhgdnbeygmrazbg.functions.supabase.co

extracted_from_files

Domain
detected Domain: e.money

XIOC detected Domain: e.money

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: l.int

XIOC detected Domain: l.int

extracted_from_files

Domain
detected Domain: l.date

XIOC detected Domain: l.date

extracted_from_files

Domain
detected Domain: l.money

XIOC detected Domain: l.money

extracted_from_files

Domain
detected Domain: s.channel

XIOC detected Domain: s.channel

extracted_from_files

Domain
detected Domain: e.email

XIOC detected Domain: e.email

extracted_from_files

Domain
detected Domain: e.phone

XIOC detected Domain: e.phone

extracted_from_files

Domain
detected Domain: e.channel

XIOC detected Domain: e.channel

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

Domain
detected Domain: o.nc

XIOC detected Domain: o.nc

extracted_from_files

IP
detected IP: ea::

XIOC detected IP: ea::

extracted_from_files

Domain
detected Domain: r.storage

XIOC detected Domain: r.storage

extracted_from_files

Domain
detected Domain: this.storage

XIOC detected Domain: this.storage

extracted_from_files

Domain
detected Domain: n.data

XIOC detected Domain: n.data

extracted_from_files

Domain
detected Domain: o.data

XIOC detected Domain: o.data

extracted_from_files

Domain
detected Domain: o.channel

XIOC detected Domain: o.channel

extracted_from_files

Domain
detected Domain: i.data

XIOC detected Domain: i.data

extracted_from_files

Domain
detected Domain: s.data

XIOC detected Domain: s.data

extracted_from_files

Domain
detected Domain: object.prototype.propertyisenumerable.call

XIOC detected Domain: object.prototype.propertyisenumerable.call

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Domain
detected Domain: r.new

XIOC detected Domain: r.new

extracted_from_files

Domain
detected Domain: e.page

XIOC detected Domain: e.page

extracted_from_files

Domain
detected Domain: c.total

XIOC detected Domain: c.total

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: r.name

XIOC detected Domain: r.name

extracted_from_files

Domain
detected Domain: currentselectionitem.id

XIOC detected Domain: currentselectionitem.id

extracted_from_files

Domain
detected Domain: location.search

XIOC detected Domain: location.search

extracted_from_files

Domain
detected Domain: www.jsdelivr.com

XIOC detected Domain: www.jsdelivr.com

extracted_from_files

Domain
detected Domain: developer.mozilla.org

XIOC detected Domain: developer.mozilla.org

extracted_from_files

Domain
detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: f.name

XIOC detected Domain: f.name

extracted_from_files

Domain
detected Domain: node.folder.id

XIOC detected Domain: node.folder.id

extracted_from_files

Domain
detected Domain: l.next

XIOC detected Domain: l.next

extracted_from_files

Domain
detected Domain: newest.id

XIOC detected Domain: newest.id

extracted_from_files

Domain
detected Domain: res.id

XIOC detected Domain: res.id

extracted_from_files

Domain
detected Domain: open.spotify.com

XIOC detected Domain: open.spotify.com

extracted_from_files

Domain
detected Domain: a.name

XIOC detected Domain: a.name

extracted_from_files

Domain
detected Domain: b.name

XIOC detected Domain: b.name

extracted_from_files

Domain
detected Domain: calendar-day.today

XIOC detected Domain: calendar-day.today

extracted_from_files

Domain
detected Domain: search-input.search

XIOC detected Domain: search-input.search

extracted_from_files

Domain
detected Domain: quickbox-privacy.netlify.app

XIOC detected Domain: quickbox-privacy.netlify.app

extracted_from_files

Domain
detected Domain: chrome.google.com

XIOC detected Domain: chrome.google.com

extracted_from_files

Domain
detected Domain: console.info

XIOC detected Domain: console.info

extracted_from_files

Domain
detected Domain: chrome.storage

XIOC detected Domain: chrome.storage

extracted_from_files

Domain
detected Domain: modal.id

XIOC detected Domain: modal.id

extracted_from_files

Domain
detected Domain: i.id

XIOC detected Domain: i.id

extracted_from_files

Domain
detected Domain: sender.tab

XIOC detected Domain: sender.tab

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: node.folder.name

XIOC detected Domain: node.folder.name

extracted_from_files

Domain
detected Domain: window.location.search

XIOC detected Domain: window.location.search

extracted_from_files

Domain
detected Domain: noteitem.id

XIOC detected Domain: noteitem.id

extracted_from_files

Domain
detected Domain: usage-bar-inner.at

XIOC detected Domain: usage-bar-inner.at

extracted_from_files

Domain
detected Domain: right.style.gap

XIOC detected Domain: right.style.gap

extracted_from_files

Domain
detected Domain: meta.date

XIOC detected Domain: meta.date

extracted_from_files

Domain
detected Domain: folder.id

XIOC detected Domain: folder.id

extracted_from_files

Domain
detected Domain: textwrap.style.gap

XIOC detected Domain: textwrap.style.gap

extracted_from_files

Domain
detected Domain: metaupdate.date

XIOC detected Domain: metaupdate.date

extracted_from_files

Domain
detected Domain: current.name

XIOC detected Domain: current.name

extracted_from_files

Domain
detected Domain: child.id

XIOC detected Domain: child.id

extracted_from_files

Domain
detected Domain: f.id

XIOC detected Domain: f.id

extracted_from_files

Domain
detected Domain: folder.name

XIOC detected Domain: folder.name

extracted_from_files

Domain
detected Domain: x.id

XIOC detected Domain: x.id

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain
detected Domain: input.select

XIOC detected Domain: input.select

extracted_from_files

IP
detected IP: ee::bef

XIOC detected IP: ee::bef

extracted_from_files

Security Analysis Summary

Security Analysis Overview

QuickBox – Fast Productivity Panel is a Chrome Web Store extension published by [email protected]. Version 0.1.4 has been analyzed by the Risky Plugins security platform, receiving a risk score of 84.94/100 (HIGH risk) based on 205 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • Medium: 142 finding(s)
  • Low: 63 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

QuickBox – Fast Productivity Panel is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 2 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions