Is "SOM Utils" on Firefox Add-ons Safe to Install?

Hridya Agrawal · firefox · v1.8

Improve your Summer of Making experience with this extension that adds essential features and detailed analytics to the Summer of Making website. Key Features Smart Efficiency Tracking: Shells/Hour Metrics: See your efficiency on every project card with color-coded badges Performance Insights: Quickly identify your most and least productive projects Real-time Calculations: Automatic efficiency updates as you log hours Project Sorting: Most/Least hours worked Highest/Lowest shell earnings Best/Worst efficiency (shells per hour) Alphabetical (A-Z or Z-A) Vote Estimation: Estimating the amount of votes & elo your project got! Voting Enhancements: AI detection: Detect if projects & devlogs were AI generated. 1 devlog in xx hours: Useful stat to see story develop throughout the project. File Management: Paste to Upload: Copy images and paste them directly into devlogs Personal Goal Tracking: Shop Item Goals: Set targets for specific Summer of Making shop purchases Progress Visualization: See exactly how many shells you need for your goals Time Estimates: Get personalized completion time predictions based on your efficiency Add multiple of an item: Want 20x Bambu credits and track it via goals? Now you can! Advanced Analytics: Efficiency Comparisons: Compare your performance across different project types Progress Tracking: Visual charts showing your Summer of Making journey Leaderboard Ranking & % of total shells added!

Risk Assessment

Analyzed
62.77
out of 100
MEDIUM

339 security findings detected across all analyzers

Firefox extension requesting 7 permissions

Severity Breakdown

0
Critical
41
High
298
Medium
0
Low
0
Info

Finding Categories

41
Malware Signatures
14
Network
276
IoC Indicators

YARA Rules Matched

10 rules(41 hits)
postinstall system command postinstall network communication postinstall file download postinstall crypto operations postinstall obfuscation postinstall file manipulation postinstall registry modification LocalStorageShouldNotBeUsed NoUseWeakRandom postinstall environment access

Requested Permissions

7 permissions
activeTab
Medium
tabs
Medium
storage
Low
https://summer.hackclub.com/*
Low
https://lb.summer.hackclub.com/*
Low
https://explorpheus.hackclub.com/*
Low
https://ai.hackclub.com/*
Low

About This Extension

Improve your Summer of Making experience with this extension that adds essential features and detailed analytics to the Summer of Making website. Key Features Smart Efficiency Tracking: Shells/Hour Metrics: See your efficiency on every project card with color-coded badges Performance Insights: Quickly identify your most and least productive projects Real-time Calculations: Automatic efficiency updates as you log hours Project Sorting: Most/Least hours worked Highest/Lowest shell earnings Best/Worst efficiency (shells per hour) Alphabetical (A-Z or Z-A) Vote Estimation: Estimating the amount of votes & elo your project got! Voting Enhancements: AI detection: Detect if projects & devlogs were AI generated. 1 devlog in xx hours: Useful stat to see story develop throughout the project. File Management: Paste to Upload: Copy images and paste them directly into devlogs Personal Goal Tracking: Shop Item Goals: Set targets for specific Summer of Making shop purchases Progress Visualization: See exactly how many shells you need for your goals Time Estimates: Get personalized completion time predictions based on your efficiency Add multiple of an item: Want 20x Bambu credits and track it via goals? Now you can! Advanced Analytics: Efficiency Comparisons: Compare your performance across different project types Progress Tracking: Visual charts showing your Summer of Making journey Leaderboard Ranking & % of total shells added!

Detailed Findings

56 total

YARA Rule Matches

10 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
46
IP Addresses
11
Domains
223
Strings
276

All Indicators · 276

Domain
detected Domain: ia.prototype.generateticklabels.call

XIOC detected Domain: ia.prototype.generateticklabels.call

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

URL
detected URL: https://summer.hackclub.com/*

XIOC detected URL: https://summer.hackclub.com/*

extracted_from_files

URL
detected URL: https://lb.summer.hackclub.com/*

XIOC detected URL: https://lb.summer.hackclub.com/*

extracted_from_files

URL
detected URL: https://explorpheus.hackclub.com/*

XIOC detected URL: https://explorpheus.hackclub.com/*

extracted_from_files

URL
detected URL: https://ai.hackclub.com/*

XIOC detected URL: https://ai.hackclub.com/*

extracted_from_files

URL
detected URL: https://summer.hackclub.com/assets/container/container-tl-588612b5.svg

XIOC detected URL: https://summer.hackclub.com/assets/container/container-tl-588612b5.svg

extracted_from_files

URL
detected URL: https://summer.hackclub.com/assets/container/container-tm-b678f005.svg

XIOC detected URL: https://summer.hackclub.com/assets/container/container-tm-b678f005.svg

extracted_from_files

URL
detected URL: http://ns.adobe.com/xap/1.0/'

XIOC detected URL: http://ns.adobe.com/xap/1.0/'

extracted_from_files

Domain
detected Domain: signingca1.addons.mozilla.org

XIOC detected Domain: signingca1.addons.mozilla.org

extracted_from_files

Domain
detected Domain: privacypolicy.md

XIOC detected Domain: privacypolicy.md

extracted_from_files

IP
detected IP: d::af

XIOC detected IP: d::af

extracted_from_files

IP
detected IP: d::bef

XIOC detected IP: d::bef

extracted_from_files

IP
detected IP: ed::af

XIOC detected IP: ed::af

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: ai.hackclub.com

XIOC detected Domain: ai.hackclub.com

extracted_from_files

Domain
detected Domain: gmail.com

XIOC detected Domain: gmail.com

extracted_from_files

Domain
detected Domain: tb105fdfe0c5d0f1f12be12ad731c2b89.bf3aebc2efc9eb562c13aac7e757770f.addons.mozilla.org

XIOC detected Domain: tb105fdfe0c5d0f1f12be12ad731c2b89.bf3aebc2efc9eb562c13aac7e757770f.addons.mozilla.org

extracted_from_files

Domain
detected Domain: content-signature.mozilla.org

XIOC detected Domain: content-signature.mozilla.org

extracted_from_files

Domain
detected Domain: addons.mozilla.org

XIOC detected Domain: addons.mozilla.org

extracted_from_files

Domain
detected Domain: mozilla.com

XIOC detected Domain: mozilla.com

extracted_from_files

Domain
detected Domain: sender.tab.id

XIOC detected Domain: sender.tab.id

extracted_from_files

Domain
detected Domain: args.map

XIOC detected Domain: args.map

extracted_from_files

Domain
detected Domain: summer.hackclub.com

XIOC detected Domain: summer.hackclub.com

extracted_from_files

Domain
detected Domain: hackatime.hackclub.com

XIOC detected Domain: hackatime.hackclub.com

extracted_from_files

Domain
detected Domain: explorpheus.hackclub.com

XIOC detected Domain: explorpheus.hackclub.com

extracted_from_files

Domain
detected Domain: lb.summer.hackclub.com

XIOC detected Domain: lb.summer.hackclub.com

extracted_from_files

Domain
detected Domain: analysisresult.ai

XIOC detected Domain: analysisresult.ai

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: t.call

XIOC detected Domain: t.call

extracted_from_files

Domain
detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: www.chartjs.org

XIOC detected Domain: www.chartjs.org

extracted_from_files

Domain
detected Domain: user.payouts.map

XIOC detected Domain: user.payouts.map

extracted_from_files

Domain
detected Domain: t.target

XIOC detected Domain: t.target

extracted_from_files

Domain
detected Domain: s.top

XIOC detected Domain: s.top

extracted_from_files

Domain
detected Domain: e.host

XIOC detected Domain: e.host

extracted_from_files

Domain
detected Domain: this.events

XIOC detected Domain: this.events

extracted_from_files

Domain
detected Domain: lt.call

XIOC detected Domain: lt.call

extracted_from_files

Domain
detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain
detected Domain: n.data

XIOC detected Domain: n.data

extracted_from_files

Domain
detected Domain: t.style

XIOC detected Domain: t.style

extracted_from_files

Domain
detected Domain: t.family

XIOC detected Domain: t.family

extracted_from_files

Domain
detected Domain: a.style

XIOC detected Domain: a.style

extracted_from_files

Domain
detected Domain: r.top

XIOC detected Domain: r.top

extracted_from_files

Domain
detected Domain: a.top

XIOC detected Domain: a.top

extracted_from_files

Domain
detected Domain: s.clienty-t.top

XIOC detected Domain: s.clienty-t.top

extracted_from_files

Domain
detected Domain: t.canvas.style

XIOC detected Domain: t.canvas.style

extracted_from_files

Domain
detected Domain: e.family

XIOC detected Domain: e.family

extracted_from_files

Domain
detected Domain: e.style

XIOC detected Domain: e.style

extracted_from_files

Domain
detected Domain: l.next

XIOC detected Domain: l.next

extracted_from_files

Domain
detected Domain: e.bottom-e.top

XIOC detected Domain: e.bottom-e.top

extracted_from_files

Domain
detected Domain: e.top

XIOC detected Domain: e.top

extracted_from_files

Domain
detected Domain: t.save

XIOC detected Domain: t.save

extracted_from_files

Domain
detected Domain: e.box

XIOC detected Domain: e.box

extracted_from_files

Domain
detected Domain: g.top

XIOC detected Domain: g.top

extracted_from_files

Domain
detected Domain: i.outerheight-n.bottom-n.top

XIOC detected Domain: i.outerheight-n.bottom-n.top

extracted_from_files

Domain
detected Domain: n.top

XIOC detected Domain: n.top

extracted_from_files

Domain
detected Domain: t.top

XIOC detected Domain: t.top

extracted_from_files

Domain
detected Domain: r.box

XIOC detected Domain: r.box

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Domain
detected Domain: i.data

XIOC detected Domain: i.data

extracted_from_files

Domain
detected Domain: wa.id

XIOC detected Domain: wa.id

extracted_from_files

Domain
detected Domain: cache.data

XIOC detected Domain: cache.data

extracted_from_files

Domain
detected Domain: ka.id

XIOC detected Domain: ka.id

extracted_from_files

Domain
detected Domain: o.properties

XIOC detected Domain: o.properties

extracted_from_files

Domain
detected Domain: t.to

XIOC detected Domain: t.to

extracted_from_files

Domain
detected Domain: s.style

XIOC detected Domain: s.style

extracted_from_files

Domain
detected Domain: this.chart.data

XIOC detected Domain: this.chart.data

extracted_from_files

Domain
detected Domain: this.top

XIOC detected Domain: this.top

extracted_from_files

Domain
detected Domain: this.id

XIOC detected Domain: this.id

extracted_from_files

Domain
detected Domain: rs.numeric.call

XIOC detected Domain: rs.numeric.call

extracted_from_files

Domain
detected Domain: this.dataelementtype.id

XIOC detected Domain: this.dataelementtype.id

extracted_from_files

Domain
detected Domain: this.datasetelementtype.id

XIOC detected Domain: this.datasetelementtype.id

extracted_from_files

Domain
detected Domain: s.data

XIOC detected Domain: s.data

extracted_from_files

Domain
detected Domain: e.save

XIOC detected Domain: e.save

extracted_from_files

Domain
detected Domain: i.save

XIOC detected Domain: i.save

extracted_from_files

Domain
detected Domain: c-e.top

XIOC detected Domain: c-e.top

extracted_from_files

Domain
detected Domain: p.data

XIOC detected Domain: p.data

extracted_from_files

Domain
detected Domain: margins.top

XIOC detected Domain: margins.top

extracted_from_files

Domain
detected Domain: this.fit

XIOC detected Domain: this.fit

extracted_from_files

Domain
detected Domain: i.top

XIOC detected Domain: i.top

extracted_from_files

Domain
detected Domain: e.plugin.id

XIOC detected Domain: e.plugin.id

extracted_from_files

Domain
detected Domain: t.plugin.id

XIOC detected Domain: t.plugin.id

extracted_from_files

Domain
detected Domain: r.id

XIOC detected Domain: r.id

extracted_from_files

Domain
detected Domain: s.id

XIOC detected Domain: s.id

extracted_from_files

Domain
detected Domain: object.prototype.isprototypeof.call

XIOC detected Domain: object.prototype.isprototypeof.call

extracted_from_files

Domain
detected Domain: c.top

XIOC detected Domain: c.top

extracted_from_files

Domain
detected Domain: t.backdrop.top

XIOC detected Domain: t.backdrop.top

extracted_from_files

Domain
detected Domain: t.events

XIOC detected Domain: t.events

extracted_from_files

Domain
detected Domain: h.id

XIOC detected Domain: h.id

extracted_from_files

Domain
detected Domain: n.id

XIOC detected Domain: n.id

extracted_from_files

Domain
detected Domain: this.config.data

XIOC detected Domain: this.config.data

extracted_from_files

Domain
detected Domain: o.canvas.id

XIOC detected Domain: o.canvas.id

extracted_from_files

Domain
detected Domain: o.id

XIOC detected Domain: o.id

extracted_from_files

Domain
detected Domain: config.data

XIOC detected Domain: config.data

extracted_from_files

Domain
detected Domain: ln.id

XIOC detected Domain: ln.id

extracted_from_files

Domain
detected Domain: tn.id

XIOC detected Domain: tn.id

extracted_from_files

Domain
detected Domain: g.center

XIOC detected Domain: g.center

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: e.options.events

XIOC detected Domain: e.options.events

extracted_from_files

Domain
detected Domain: this.options.events

XIOC detected Domain: this.options.events

extracted_from_files

Domain
detected Domain: n.top-i.top

XIOC detected Domain: n.top-i.top

extracted_from_files

Domain
detected Domain: rn.id

XIOC detected Domain: rn.id

extracted_from_files

Domain
detected Domain: h.data

XIOC detected Domain: h.data

extracted_from_files

Domain
detected Domain: e.labels.map

XIOC detected Domain: e.labels.map

extracted_from_files

Domain
detected Domain: en.id

XIOC detected Domain: en.id

extracted_from_files

Domain
detected Domain: o.data

XIOC detected Domain: o.data

extracted_from_files

Domain
detected Domain: cachedmeta.total

XIOC detected Domain: cachedmeta.total

extracted_from_files

Domain
detected Domain: s.total

XIOC detected Domain: s.total

extracted_from_files

Domain
detected Domain: to.id

XIOC detected Domain: to.id

extracted_from_files

Domain
detected Domain: r.style

XIOC detected Domain: r.style

extracted_from_files

Domain
detected Domain: yn.id

XIOC detected Domain: yn.id

extracted_from_files

Domain
detected Domain: vn.id

XIOC detected Domain: vn.id

extracted_from_files

Domain
detected Domain: fn.id

XIOC detected Domain: fn.id

extracted_from_files

Domain
detected Domain: zn.id

XIOC detected Domain: zn.id

extracted_from_files

Domain
detected Domain: in.id

XIOC detected Domain: in.id

extracted_from_files

Domain
detected Domain: n.show

XIOC detected Domain: n.show

extracted_from_files

Domain
detected Domain: s.save

XIOC detected Domain: s.save

extracted_from_files

Domain
detected Domain: i.target

XIOC detected Domain: i.target

extracted_from_files

Domain
detected Domain: ho.id

XIOC detected Domain: ho.id

extracted_from_files

Domain
detected Domain: io.id

XIOC detected Domain: io.id

extracted_from_files

Domain
detected Domain: l.top

XIOC detected Domain: l.top

extracted_from_files

Domain
detected Domain: o.top

XIOC detected Domain: o.top

extracted_from_files

Domain
detected Domain: i.labeltextcolor.call

XIOC detected Domain: i.labeltextcolor.call

extracted_from_files

Domain
detected Domain: i.labelpointstyle.call

XIOC detected Domain: i.labelpointstyle.call

extracted_from_files

Domain
detected Domain: i.labelcolor.call

XIOC detected Domain: i.labelcolor.call

extracted_from_files

Domain
detected Domain: n.afterlabel.call

XIOC detected Domain: n.afterlabel.call

extracted_from_files

Domain
detected Domain: n.label.call

XIOC detected Domain: n.label.call

extracted_from_files

Domain
detected Domain: n.beforelabel.call

XIOC detected Domain: n.beforelabel.call

extracted_from_files

Domain
detected Domain: padding.top

XIOC detected Domain: padding.top

extracted_from_files

Domain
detected Domain: n.save

XIOC detected Domain: n.save

extracted_from_files

Domain
detected Domain: d-i.top

XIOC detected Domain: d-i.top

extracted_from_files

Domain
detected Domain: file.name

XIOC detected Domain: file.name

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

Domain
detected Domain: sa.id

XIOC detected Domain: sa.id

extracted_from_files

Domain
detected Domain: ta.id

XIOC detected Domain: ta.id

extracted_from_files

Domain
detected Domain: i.external.call

XIOC detected Domain: i.external.call

extracted_from_files

Hash
detected MD5 Hash: bf3aebc2efc9eb562c13aac7e757770f

XIOC detected MD5 Hash: bf3aebc2efc9eb562c13aac7e757770f

extracted_from_files

URL
detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

XIOC detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

extracted_from_files

URL
detected URL: https://summer.hackclub.com/assets/container/container-tr-0a17f012.svg

XIOC detected URL: https://summer.hackclub.com/assets/container/container-tr-0a17f012.svg

extracted_from_files

Domain
detected Domain: this.ticks.map

XIOC detected Domain: this.ticks.map

extracted_from_files

Domain
detected Domain: t.adapters.date

XIOC detected Domain: t.adapters.date

extracted_from_files

Domain
detected Domain: ga.id

XIOC detected Domain: ga.id

extracted_from_files

Domain
detected Domain: 2-e.top

XIOC detected Domain: 2-e.top

extracted_from_files

Domain
detected Domain: raw.githubusercontent.com

XIOC detected Domain: raw.githubusercontent.com

extracted_from_files

Domain
detected Domain: u.date

XIOC detected Domain: u.date

extracted_from_files

Domain
detected Domain: p.rest

XIOC detected Domain: p.rest

extracted_from_files

Domain
detected Domain: r.date

XIOC detected Domain: r.date

extracted_from_files

Domain
detected Domain: e.date

XIOC detected Domain: e.date

extracted_from_files

Domain
detected Domain: r.day

XIOC detected Domain: r.day

extracted_from_files

Domain
detected Domain: git.io

XIOC detected Domain: git.io

extracted_from_files

IP
detected Domain: shipsdata.map

XIOC detected Domain: shipsdata.map

extracted_from_files

Domain
detected Domain: efficiencies.map

XIOC detected Domain: efficiencies.map

extracted_from_files

Domain
detected Domain: olddata.projects.map

XIOC detected Domain: olddata.projects.map

extracted_from_files

Domain
detected Domain: dash.fraud.land

XIOC detected Domain: dash.fraud.land

extracted_from_files

Domain
detected Domain: billy.3kh0.net

XIOC detected Domain: billy.3kh0.net

extracted_from_files

Domain
detected Domain: hackclub.app

XIOC detected Domain: hackclub.app

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: avatars.slack-edge.com

XIOC detected Domain: avatars.slack-edge.com

extracted_from_files

Domain
detected Domain: span.ml

XIOC detected Domain: span.ml

extracted_from_files

Domain
detected Domain: text-base.md

XIOC detected Domain: text-base.md

extracted_from_files

Domain
detected Domain: mb-4.text-base.md

XIOC detected Domain: mb-4.text-base.md

extracted_from_files

Domain
detected Domain: flex-row.md

XIOC detected Domain: flex-row.md

extracted_from_files

Domain
detected Domain: flex.flex-col.md

XIOC detected Domain: flex.flex-col.md

extracted_from_files

IP
detected Domain: lastentry.ships.map

XIOC detected Domain: lastentry.ships.map

extracted_from_files

Domain
detected Domain: flex.flex-wrap.items-center.space

XIOC detected Domain: flex.flex-wrap.items-center.space

extracted_from_files

Domain
detected Domain: hiddenmetrics.map

XIOC detected Domain: hiddenmetrics.map

extracted_from_files

Domain
detected Domain: visiblemetrics.map

XIOC detected Domain: visiblemetrics.map

extracted_from_files

Domain
detected Domain: analysis.ai

XIOC detected Domain: analysis.ai

extracted_from_files

Domain
detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

Domain
detected Domain: readmorebutton.click

XIOC detected Domain: readmorebutton.click

extracted_from_files

Domain
detected Domain: response.data

XIOC detected Domain: response.data

extracted_from_files

Domain
detected Domain: headercontainer.style.gap

XIOC detected Domain: headercontainer.style.gap

extracted_from_files

Domain
detected Domain: headerdiv.style.gap

XIOC detected Domain: headerdiv.style.gap

extracted_from_files

Domain
detected Domain: div.mb-8.md

XIOC detected Domain: div.mb-8.md

extracted_from_files

Domain
detected Domain: shellshistory.map

XIOC detected Domain: shellshistory.map

extracted_from_files

Domain
detected Domain: ctx.save

XIOC detected Domain: ctx.save

extracted_from_files

Domain
detected Domain: meta.data

XIOC detected Domain: meta.data

extracted_from_files

Domain
detected Domain: flex.items-center.justify-between.mb-2.sm

XIOC detected Domain: flex.items-center.justify-between.mb-2.sm

extracted_from_files

Domain
detected Domain: flex.items-center.space-x-3.md

XIOC detected Domain: flex.items-center.space-x-3.md

extracted_from_files

Domain
detected Domain: flex.items-center.space

XIOC detected Domain: flex.items-center.space

extracted_from_files

Domain
detected Domain: style.id

XIOC detected Domain: style.id

extracted_from_files

Domain
detected Domain: reader.read

XIOC detected Domain: reader.read

extracted_from_files

Domain
detected Domain: projects.map

XIOC detected Domain: projects.map

extracted_from_files

Domain
detected Domain: ul.space

XIOC detected Domain: ul.space

extracted_from_files

Domain
detected Domain: flex.items-center.gap

XIOC detected Domain: flex.items-center.gap

extracted_from_files

Domain
detected Domain: parseddata.goals.map

XIOC detected Domain: parseddata.goals.map

extracted_from_files

Domain
detected Domain: checkedindices.map

XIOC detected Domain: checkedindices.map

extracted_from_files

Domain
detected Domain: checkedtoggles.map

XIOC detected Domain: checkedtoggles.map

extracted_from_files

IP
detected Domain: ship.name

XIOC detected Domain: ship.name

extracted_from_files

IP
detected Domain: sortedships.map

XIOC detected Domain: sortedships.map

extracted_from_files

IP
detected Domain: ships.map

XIOC detected Domain: ships.map

extracted_from_files

Domain
detected Domain: space-x-4.md

XIOC detected Domain: space-x-4.md

extracted_from_files

Domain
detected Domain: goals.map

XIOC detected Domain: goals.map

extracted_from_files

Domain
detected Domain: presetefficiencies.map

XIOC detected Domain: presetefficiencies.map

extracted_from_files

Domain
detected Domain: buttonelement.click

XIOC detected Domain: buttonelement.click

extracted_from_files

Domain
detected Domain: button.click

XIOC detected Domain: button.click

extracted_from_files

Domain
detected Domain: goal.id

XIOC detected Domain: goal.id

extracted_from_files

Domain
detected Domain: itemdata.name

XIOC detected Domain: itemdata.name

extracted_from_files

Domain
detected Domain: itemdata.id

XIOC detected Domain: itemdata.id

extracted_from_files

Domain
detected Domain: hackatimedata.data

XIOC detected Domain: hackatimedata.data

extracted_from_files

URL
detected URL: http://ns.adobe.com/pdf/1.3/

XIOC detected URL: http://ns.adobe.com/pdf/1.3/

extracted_from_files

URL
detected URL: http://purl.org/dc/elements/1.1/

XIOC detected URL: http://purl.org/dc/elements/1.1/

extracted_from_files

URL
detected URL: http://ns.attribution.com/ads/1.0/

XIOC detected URL: http://ns.attribution.com/ads/1.0/

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: g.id

XIOC detected Domain: g.id

extracted_from_files

Domain
detected Domain: goal.name

XIOC detected Domain: goal.name

extracted_from_files

Domain
detected Domain: p.total

XIOC detected Domain: p.total

extracted_from_files

Domain
detected Domain: p.id

XIOC detected Domain: p.id

extracted_from_files

Domain
detected Domain: cache.p.map

XIOC detected Domain: cache.p.map

extracted_from_files

Domain
detected Domain: order.id

XIOC detected Domain: order.id

extracted_from_files

Domain
detected Domain: ordersdata.map

XIOC detected Domain: ordersdata.map

extracted_from_files

Domain
detected Domain: trust.trust

XIOC detected Domain: trust.trust

extracted_from_files

Domain
detected Domain: hackatimedata.trust

XIOC detected Domain: hackatimedata.trust

extracted_from_files

Domain
detected Domain: pt-8.pb-2.max-w-7xl.mx

XIOC detected Domain: pt-8.pb-2.max-w-7xl.mx

extracted_from_files

Domain
detected Domain: px-8.pt-2.md

XIOC detected Domain: px-8.pt-2.md

extracted_from_files

Domain
detected Domain: mb-6.px-4.md

XIOC detected Domain: mb-6.px-4.md

extracted_from_files

Domain
detected Domain: flex.flex-col.justify-between.items-start.mb-4.md

XIOC detected Domain: flex.flex-col.justify-between.items-start.mb-4.md

extracted_from_files

Domain
detected Domain: project.id

XIOC detected Domain: project.id

extracted_from_files

Domain
detected Domain: project.total

XIOC detected Domain: project.total

extracted_from_files

Domain
detected Domain: results.map

XIOC detected Domain: results.map

extracted_from_files

Domain
detected Domain: span.inline-flex.items-center.rounded-full.text-xs.font-medium.bg-blue-100.text-blue-800.mt

XIOC detected Domain: span.inline-flex.items-center.rounded-full.text-xs.font-medium.bg-blue-100.text-blue-800.mt

extracted_from_files

Domain
detected Domain: som-search-results.show

XIOC detected Domain: som-search-results.show

extracted_from_files

Domain
detected Domain: som-search-loading.show

XIOC detected Domain: som-search-loading.show

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain
detected Domain: ns.adobe.com

XIOC detected Domain: ns.adobe.com

extracted_from_files

URL
detected Domain: purl.org

XIOC detected Domain: purl.org

extracted_from_files

Domain
detected Domain: ns.attribution.com

XIOC detected Domain: ns.attribution.com

extracted_from_files

URL
detected URL: https://ai.hackclub.com/chat/completions';

XIOC detected URL: https://ai.hackclub.com/chat/completions';

extracted_from_files

URL
detected URL: http://addons.mozilla.org/ca/crl.pem0N

XIOC detected URL: http://addons.mozilla.org/ca/crl.pem0N

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Domain
detected Domain: div.mx

XIOC detected Domain: div.mx

extracted_from_files

Domain
detected Domain: bg-gradient-to-r.from-gray-300.via-gray-200.to

XIOC detected Domain: bg-gradient-to-r.from-gray-300.via-gray-200.to

extracted_from_files

Domain
detected Domain: bg-gradient-to-r.from-orange-300.via-orange-200.to

XIOC detected Domain: bg-gradient-to-r.from-orange-300.via-orange-200.to

extracted_from_files

Domain
detected Domain: bg-gradient-to-r.from-yellow-300.via-yellow-200.to

XIOC detected Domain: bg-gradient-to-r.from-yellow-300.via-yellow-200.to

extracted_from_files

URL
detected URL: https://github.com/kurkle/color#readme

XIOC detected URL: https://github.com/kurkle/color#readme

extracted_from_files

URL
detected URL: https://www.chartjs.org

XIOC detected URL: https://www.chartjs.org

extracted_from_files

URL
detected URL: https://summer.hackclub.com/admin/blazer/queries/45-get-shop-orders?user_id=$

XIOC detected URL: https://summer.hackclub.com/admin/blazer/queries/45-get-shop-orders?user_id=$

extracted_from_files

URL
detected URL: https://summer.hackclub.com/admin/blazer/queries/run

XIOC detected URL: https://summer.hackclub.com/admin/blazer/queries/run

extracted_from_files

URL
detected URL: https://hackatime.hackclub.com/api/v1/users/$

XIOC detected URL: https://hackatime.hackclub.com/api/v1/users/$

extracted_from_files

URL
detected URL: https://explorpheus.hackclub.com/leaderboard');

XIOC detected URL: https://explorpheus.hackclub.com/leaderboard');

extracted_from_files

URL
detected URL: https://lb.summer.hackclub.com/api/search?search=$

XIOC detected URL: https://lb.summer.hackclub.com/api/search?search=$

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

URL
detected URL: https://raw.githubusercontent.com/$

XIOC detected URL: https://raw.githubusercontent.com/$

extracted_from_files

URL
detected URL: https://git.io/fxCyr

XIOC detected URL: https://git.io/fxCyr

extracted_from_files

URL
detected URL: https://git.io/fjule

XIOC detected URL: https://git.io/fjule

extracted_from_files

URL
detected URL: https://summer.hackclub.com/assets/container/container-bl-379861a1.svg

XIOC detected URL: https://summer.hackclub.com/assets/container/container-bl-379861a1.svg

extracted_from_files

URL
detected URL: https://summer.hackclub.com/assets/container/container-mr-bf6da02e.svg

XIOC detected URL: https://summer.hackclub.com/assets/container/container-mr-bf6da02e.svg

extracted_from_files

URL
detected URL: https://summer.hackclub.com/assets/container/container-ml-61c63452.svg

XIOC detected URL: https://summer.hackclub.com/assets/container/container-ml-61c63452.svg

extracted_from_files

URL
detected URL: https://summer.hackclub.com/leaderboard';

XIOC detected URL: https://summer.hackclub.com/leaderboard';

extracted_from_files

URL
detected URL: https://dash.fraud.land/profile/$

XIOC detected URL: https://dash.fraud.land/profile/$

extracted_from_files

URL
detected URL: https://billy.3kh0.net/?u=$

XIOC detected URL: https://billy.3kh0.net/?u=$

extracted_from_files

URL
detected URL: https://ai.hackclub.com/chat/completions',

XIOC detected URL: https://ai.hackclub.com/chat/completions',

extracted_from_files

URL
detected URL: https://hackclub.app/)

XIOC detected URL: https://hackclub.app/)

extracted_from_files

URL
detected URL: https://summer.hackclub.com/projects/$

XIOC detected URL: https://summer.hackclub.com/projects/$

extracted_from_files

URL
detected URL: https://summer.hackclub.com/assets/container/container-br-259cfcee.svg

XIOC detected URL: https://summer.hackclub.com/assets/container/container-br-259cfcee.svg

extracted_from_files

URL
detected URL: https://summer.hackclub.com/assets/container/container-bm-6ff3aaf2.svg

XIOC detected URL: https://summer.hackclub.com/assets/container/container-bm-6ff3aaf2.svg

extracted_from_files

URL
detected URL: http://ns.adobe.com/pdf/1.3/'

XIOC detected URL: http://ns.adobe.com/pdf/1.3/'

extracted_from_files

URL
detected URL: http://purl.org/dc/elements/1.1/'

XIOC detected URL: http://purl.org/dc/elements/1.1/'

extracted_from_files

URL
detected URL: http://ns.attribution.com/ads/1.0/'

XIOC detected URL: http://ns.attribution.com/ads/1.0/'

extracted_from_files

URL
detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#'

XIOC detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#'

extracted_from_files

URL
detected URL: https://summer.hackclub.com$

XIOC detected URL: https://summer.hackclub.com$

extracted_from_files

URL
detected URL: https://summer.hackclub.com/api/v1/projects?page=$

XIOC detected URL: https://summer.hackclub.com/api/v1/projects?page=$

extracted_from_files

URL
detected URL: https://summer.hackclub.com/admin/blazer/queries/44-votes-fraud-check?user_id=$

XIOC detected URL: https://summer.hackclub.com/admin/blazer/queries/44-votes-fraud-check?user_id=$

extracted_from_files

URL
detected URL: http://ns.adobe.com/tiff/1.0/

XIOC detected URL: http://ns.adobe.com/tiff/1.0/

extracted_from_files

URL
detected URL: http://ns.adobe.com/xap/1.0/

XIOC detected URL: http://ns.adobe.com/xap/1.0/

extracted_from_files

Domain
detected Domain: div.bg

XIOC detected Domain: div.bg

extracted_from_files

Domain
detected Domain: f.name

XIOC detected Domain: f.name

extracted_from_files

Domain
detected Domain: cachedmeta.data

XIOC detected Domain: cachedmeta.data

extracted_from_files

Domain
detected Domain: oa.id

XIOC detected Domain: oa.id

extracted_from_files

Security Analysis Summary

Security Analysis Overview

SOM Utils is a Firefox Add-ons extension published by Hridya Agrawal. Version 1.8 has been analyzed by the Risky Plugins security platform, receiving a risk score of 62.77/100 (MEDIUM risk) based on 339 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • High: 41 finding(s)
  • Medium: 298 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

SOM Utils is published by Hridya Agrawal on the Firefox Add-ons marketplace. The extension has approximately 17 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions