Is Smart Lookup safe to use?

Smart Lookup has a security risk score of 37.74/100 (LOW risk). Our security analysis detected 36 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Smart Lookup?

Based on our automated security analysis, Smart Lookup presents low risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Tracked campaign: searchjacked

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by socket.dev

Chrome Web Store

Smart Lookup

by [email protected]

764dcfff-68bd-53f5-aa60-794f9738d944 | v1.0.2

Marketplace listing not found

Our last marketplace check could not find this listing in Chrome Web Store. It may have been removed or delisted. Existing installs may still run, but verify the publisher and package source before installing or updating.

Not found on Today

LOW risk

+13 since v1.0.1

Threat verdict

Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed: 1 months ago
Version: v1.0.2
Artifact: SHA256 5A9…7D2
Source: Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

10 detail rows

YARA Rule Matches

6 rules

Severity	Rule	Hits	Files	Metadata
LOW	`postinstall crypto operations`	1	_metadata/verified_contents.json	-
LOW	`postinstall file manipulation`	2	widget/widget.jssw/sw.js	-
LOW	`postinstall environment access`	1	sw/sw.js	-
LOW	`postinstall network communication`	1	widget/widget.html	-
LOW	`postinstall system command`	2	_metadata/verified_contents.jsonwidget/widget.html	-
LOW	`postinstall file download`	3	search.jswidget/widget.jsStorageHandler.js	-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

26 total

Loading network indicators

IoC detail rows are loaded outside the initial page render.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

Noisy-finding weight

x1.00

Publisher domain

No domain

Missing

Store verification signal

Limited signal

Limited

Extension portfolio

Portfolio

12 evidence rows available.

Finding Categories

IoC Indicators

YARA Rules Matched

6 rules(10 hits)

postinstall crypto operations postinstall file manipulation postinstall environment access postinstall network communication postinstall system command postinstall file download

Requested Permissions

3 permissions

storage

Low

declarativeNetRequestWithHostAccess

Low

*://smartlookup.co/*

Low

Security Analysis Summary

Security Analysis Overview

Smart Lookup is a Chrome Web Store extension published by [email protected]. Version 1.0.2 has been analyzed by the Risky Plugins security platform, receiving a risk score of 37.74/100 (LOW risk) based on 36 security findings.

Risk Assessment

This extension presents low security risk. Some minor findings were detected, but nothing that would prevent typical usage. Reviewing the detailed findings below is recommended before use in sensitive environments.

Findings Breakdown

Medium: 26 finding(s)
Low: 10 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Smart Lookup is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Chrome version history

Risk trend by version

2 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected

Change since first

+13

Change from previous

+13

Versions:

First analyzed version

1.0.1

Jul 28, 2026

Risk range

25 to 38

Across analyzed versions

Latest analyzed version

1.0.2

Sep 17, 2026

Selected version

low

Version

v1.0.2

1 months ago

Risk score

Findings

Change vs previous

+13

Pick any point on the chart to explore that version's code below.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

About This Extension

Seamlessly switch between trusted knowledge sources and custom web search. Enable the Smart Lookup toggle to access trusted platforms like Wikihow, Wiktionary, Wikipedia, Britannica, and more—all from one convenient extension. With the toggle off, your searches go through smartlookup.co, delivering results powered by Yahoo. Permissions Required 1. Read and change your data on this product This permission helps improve your experience and ensures secure access. It allows us to detect patterns, prevent misuse, and link the product with the right user. This access is confined to our domain and does not extend to other websites you visit. 2. Change your search setting to smartlookup.co This allows the extension to configure smartlookup.co as your default search engine, ensuring a seamless and consistent search experience directly from your browser’s address bar. Please review the links below to learn how we handle and protect your data: Privacy Policy: https://smartlookup.co/privacy-policy Terms of Service: https://smartlookup.co/terms-of-service By clicking "Add to Chrome" you confirm that you have reviewed and agreed to the Terms of Service and Privacy Policy and consent to install this Chrome™ extension. Chrome is a trademark of Google LLC. Yahoo is a registered trademark of Yahoo Inc. All third-party trademarks and brand references used herein remain the intellectual property of their respective owners. We do not claim any partnership, sponsorship, or association with these entities. Smart Lookup is a product of Delfia Limited.