Is "Highlight occurrences of the selected text" on Chrome Web Store Safe to Install?

[email protected] · chrome · v0.0.10

Double click a word and see all its occurrences highlighted like it happens in code editors. Or select a text fragment to highlight all instances of the selected string in the web page. The highlights remains until another text fragment is selected. Press ESC to cancel highlighting of the last selected string. The extension detects and highlights every instance of the selected text string within the webpage regardless of selection method - dragging, double clicking or using the keyboard. The result is almost the same as if you select some text, copy it and paste into the standard Ctrl+F search box. The matches within the web page get highlighted. The extension monitors the page for changes, e.g. during infinite scrolling, and highlights the selected text in the gradually loaded contents. The extension does not need any configuration - to activate the extension click its icon. To respect you privacy the extension is deactivated after any navigation. Click the icon again to activate the extension. The highlight color can be selected in the options The extension is free and open source

Risk Assessment

Analyzed
54.08
out of 100
MEDIUM

37 security findings detected across all analyzers

Chrome extension requesting 3 permissions

Severity Breakdown

0
Critical
14
High
23
Medium
0
Low
0
Info

Finding Categories

14
Malware Signatures
2
Network
20
IoC Indicators

YARA Rules Matched

7 rules(14 hits)
postinstall file download postinstall crypto operations postinstall file manipulation postinstall system command postinstall environment access postinstall obfuscation postinstall network communication

Requested Permissions

3 permissions
activeTab
Medium
scripting
Low
storage
Low

About This Extension

Double click a word and see all its occurrences highlighted like it happens in code editors. Or select a text fragment to highlight all instances of the selected string in the web page. The highlights remains until another text fragment is selected. Press ESC to cancel highlighting of the last selected string. The extension detects and highlights every instance of the selected text string within the webpage regardless of selection method - dragging, double clicking or using the keyboard. The result is almost the same as if you select some text, copy it and paste into the standard Ctrl+F search box. The matches within the web page get highlighted. The extension monitors the page for changes, e.g. during infinite scrolling, and highlights the selected text in the gradually loaded contents. The extension does not need any configuration - to activate the extension click its icon. To respect you privacy the extension is deactivated after any navigation. Click the icon again to activate the extension. The highlight color can be selected in the options The extension is free and open source

Detailed Findings

16 total

YARA Rule Matches

7 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
5
IP Addresses
3
Domains
14
Strings
20

All Indicators · 20

URL
detected URL: https://chromewebstore.google.com/detail/EXTENSION_ID/support

XIOC detected URL: https://chromewebstore.google.com/detail/EXTENSION_ID/support

extracted_from_files

URL
detected URL: https://medium.com/@marian-caikovski/using-javascript-modules-in-content-scripts-and-extension-service-workers-e60e97979326

XIOC detected URL: https://medium.com/@marian-caikovski/using-javascript-modules-in-content-scripts-and-extension-service-workers-e60e97979326

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

URL
detected URL: https://chromewebstore.google.com/detail/highlight-multiple-keywor/EXTENSION_ID

XIOC detected URL: https://chromewebstore.google.com/detail/highlight-multiple-keywor/EXTENSION_ID

extracted_from_files

URL
detected URL: https://firestore.googleapis.com/v1/projects/$

XIOC detected URL: https://firestore.googleapis.com/v1/projects/$

extracted_from_files

Domain
detected Domain: v.map

XIOC detected Domain: v.map

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: medium.com

XIOC detected Domain: medium.com

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: chromewebstore.google.com

XIOC detected Domain: chromewebstore.google.com

extracted_from_files

Domain
detected Domain: firestore.googleapis.com

XIOC detected Domain: firestore.googleapis.com

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: nodefilter.show

XIOC detected Domain: nodefilter.show

extracted_from_files

Domain
detected Domain: e.parentnode.host

XIOC detected Domain: e.parentnode.host

extracted_from_files

Domain
detected Domain: e.map

XIOC detected Domain: e.map

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: o.map

XIOC detected Domain: o.map

extracted_from_files

Domain
detected Domain: t.host

XIOC detected Domain: t.host

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Highlight occurrences of the selected text is a Chrome Web Store extension published by [email protected]. Version 0.0.10 has been analyzed by the Risky Plugins security platform, receiving a risk score of 54.08/100 (MEDIUM risk) based on 37 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • High: 14 finding(s)
  • Medium: 23 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Highlight occurrences of the selected text is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 167 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Frequently Asked Questions