Is "stackoverflowプラグイン v2.0" on Chrome Web Store Safe to Install?
stackoverflowのページを開くと、黒のポップアップが表示され、その下にある文字が見えなくなります。これは困るので、非表示にするプラグインを作成しました。 黒のポップアップをクリックするだけで、ポップアップが消えます。 プラグインのスクリプト自体は大変短いものです。このv1.1はv1.0の不具合を修正したものです。default_iconが未定義のアイコンになっていました。 v2.0はv1.1の不具合を修正しました。
Risk Assessment
Analyzed141 security findings detected across all analyzers
Severity Breakdown
Finding Categories
YARA Rules Matched
7 rules(8 hits)About This Extension
Detailed Findings
9 totalYARA Rule Matches
7 rulesIndicators of Compromise
Network indicators, suspicious strings, and potential IoCs extracted during analysis
All Indicators · 132
detected Domain: offset.top XIOC detected Domain: offset.top
extracted_from_files
detected Domain: weblogs.java.net XIOC detected Domain: weblogs.java.net
extracted_from_files
detected URL: http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_AVAILABLE) XIOC detected URL: http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_AVAILABLE)
extracted_from_files
detected URL: https://clients2.google.com/service/update2/crx XIOC detected URL: https://clients2.google.com/service/update2/crx
extracted_from_files
detected URL: https://*/* XIOC detected URL: https://*/*
extracted_from_files
detected URL: https://ja.stackoverflow.com/ XIOC detected URL: https://ja.stackoverflow.com/
extracted_from_files
detected URL: http://perfectionkills.com/detecting-event-support-without-browser-sniffing/ XIOC detected URL: http://perfectionkills.com/detecting-event-support-without-browser-sniffing/
extracted_from_files
detected URL: https://developer.mozilla.org/en/Security/CSP XIOC detected URL: https://developer.mozilla.org/en/Security/CSP
extracted_from_files
detected URL: http://blindsignals.com/index.php/2009/07/jquery-delay/ XIOC detected URL: http://blindsignals.com/index.php/2009/07/jquery-delay/
extracted_from_files
detected URL: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript/ XIOC detected URL: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript/
extracted_from_files
detected URL: http://www.w3.org/TR/2003/WD-DOM-Level-3-Events-20030331/ecma-script-binding.html XIOC detected URL: http://www.w3.org/TR/2003/WD-DOM-Level-3-Events-20030331/ecma-script-binding.html
extracted_from_files
detected URL: http://www.iecss.com/shimprove/javascript/shimprove.1-0-1.js XIOC detected URL: http://www.iecss.com/shimprove/javascript/shimprove.1-0-1.js
extracted_from_files
detected URL: http://dev.w3.org/csswg/cssom/#resolved-values XIOC detected URL: http://dev.w3.org/csswg/cssom/#resolved-values
extracted_from_files
detected URL: http://jquery.com/ XIOC detected URL: http://jquery.com/
extracted_from_files
detected URL: http://jquery.org/license XIOC detected URL: http://jquery.org/license
extracted_from_files
detected URL: http://sizzlejs.com/ XIOC detected URL: http://sizzlejs.com/
extracted_from_files
detected URL: http://json.org/json2.js XIOC detected URL: http://json.org/json2.js
extracted_from_files
detected URL: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context XIOC detected URL: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
extracted_from_files
detected URL: http://docs.jquery.com/Utilities/jQuery.browser XIOC detected URL: http://docs.jquery.com/Utilities/jQuery.browser
extracted_from_files
detected URL: http://javascript.nwbox.com/IEContentLoaded/ XIOC detected URL: http://javascript.nwbox.com/IEContentLoaded/
extracted_from_files
detected Domain: parentoffset.top XIOC detected Domain: parentoffset.top
extracted_from_files
detected Domain: clients2.google.com XIOC detected Domain: clients2.google.com
extracted_from_files
detected Domain: ja.stackoverflow.com XIOC detected Domain: ja.stackoverflow.com
extracted_from_files
detected Domain: stackoverflow.com XIOC detected Domain: stackoverflow.com
extracted_from_files
detected Domain: stackexchange.com XIOC detected Domain: stackexchange.com
extracted_from_files
detected Domain: m.tw XIOC detected Domain: m.tw
extracted_from_files
detected Domain: ﯞw.ws XIOC detected Domain: ﯞw.ws
extracted_from_files
detected Domain: curposition.top XIOC detected Domain: curposition.top
extracted_from_files
detected Domain: options.call XIOC detected Domain: options.call
extracted_from_files
detected Domain: options.top XIOC detected Domain: options.top
extracted_from_files
detected Domain: props.top XIOC detected Domain: props.top
extracted_from_files
detected Domain: curoffset.top XIOC detected Domain: curoffset.top
extracted_from_files
detected Domain: options.using.call XIOC detected Domain: options.using.call
extracted_from_files
detected Domain: jquery.fn.init.call XIOC detected Domain: jquery.fn.init.call
extracted_from_files
detected Domain: self.options.show XIOC detected Domain: self.options.show
extracted_from_files
detected Domain: this.options.show XIOC detected Domain: this.options.show
extracted_from_files
detected Domain: options.show XIOC detected Domain: options.show
extracted_from_files
detected Domain: complete.call XIOC detected Domain: complete.call
extracted_from_files
detected Domain: fx.now XIOC detected Domain: fx.now
extracted_from_files
detected Domain: fx.elem.style XIOC detected Domain: fx.elem.style
extracted_from_files
detected Domain: box.top XIOC detected Domain: box.top
extracted_from_files
detected Domain: xhr.open XIOC detected Domain: xhr.open
extracted_from_files
detected Domain: opt.complete.call XIOC detected Domain: opt.complete.call
extracted_from_files
detected Domain: jquery.fx.off XIOC detected Domain: jquery.fx.off
extracted_from_files
detected Domain: opt.old.call XIOC detected Domain: opt.old.call
extracted_from_files
detected Domain: this.options.step.call XIOC detected Domain: this.options.step.call
extracted_from_files
detected Domain: this.now XIOC detected Domain: this.now
extracted_from_files
detected Domain: this.elem.style XIOC detected Domain: this.elem.style
extracted_from_files
detected Domain: elem.style XIOC detected Domain: elem.style
extracted_from_files
detected Domain: s.data XIOC detected Domain: s.data
extracted_from_files
detected Domain: this.name XIOC detected Domain: this.name
extracted_from_files
detected Domain: elem.name XIOC detected Domain: elem.name
extracted_from_files
detected Domain: jqxhr.fail XIOC detected Domain: jqxhr.fail
extracted_from_files
detected Domain: s.global XIOC detected Domain: s.global
extracted_from_files
detected Domain: s.beforesend.call XIOC detected Domain: s.beforesend.call
extracted_from_files
detected Domain: wrap.map XIOC detected Domain: wrap.map
extracted_from_files
detected Domain: this.map XIOC detected Domain: this.map
extracted_from_files
detected Domain: olddata.events XIOC detected Domain: olddata.events
extracted_from_files
detected Domain: curdata.events XIOC detected Domain: curdata.events
extracted_from_files
detected Domain: curdata.data XIOC detected Domain: curdata.data
extracted_from_files
detected Domain: data.events XIOC detected Domain: data.events
extracted_from_files
detected Domain: jquery.style XIOC detected Domain: jquery.style
extracted_from_files
detected IP: :: XIOC detected IP: ::
extracted_from_files
detected Domain: expr.filter.id XIOC detected Domain: expr.filter.id
extracted_from_files
detected Domain: matches.call XIOC detected Domain: matches.call
extracted_from_files
detected Domain: qualifier.call XIOC detected Domain: qualifier.call
extracted_from_files
detected URL: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291 XIOC detected URL: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
extracted_from_files
detected Domain: wrapmap.td XIOC detected Domain: wrapmap.td
extracted_from_files
detected Domain: html.call XIOC detected Domain: html.call
extracted_from_files
detected Domain: jquery.event.dispatch.call XIOC detected Domain: jquery.event.dispatch.call
extracted_from_files
detected Domain: jquery.now XIOC detected Domain: jquery.now
extracted_from_files
detected Domain: e.target XIOC detected Domain: e.target
extracted_from_files
detected Domain: this.off XIOC detected Domain: this.off
extracted_from_files
detected Domain: this.click XIOC detected Domain: this.click
extracted_from_files
detected Domain: array.prototype.slice.call XIOC detected Domain: array.prototype.slice.call
extracted_from_files
detected Domain: expr.find.id XIOC detected Domain: expr.find.id
extracted_from_files
detected Domain: special.teardown.call XIOC detected Domain: special.teardown.call
extracted_from_files
detected Domain: event.target XIOC detected Domain: event.target
extracted_from_files
detected Domain: special.predispatch.call XIOC detected Domain: special.predispatch.call
extracted_from_files
detected Domain: jqcur.is XIOC detected Domain: jqcur.is
extracted_from_files
detected Domain: event.data XIOC detected Domain: event.data
extracted_from_files
detected Domain: handleobj.data XIOC detected Domain: handleobj.data
extracted_from_files
detected Domain: special.postdispatch.call XIOC detected Domain: special.postdispatch.call
extracted_from_files
detected Domain: jquery.attrhooks.style XIOC detected Domain: jquery.attrhooks.style
extracted_from_files
detected Domain: attrs.id XIOC detected Domain: attrs.id
extracted_from_files
detected Domain: elemdata.events XIOC detected Domain: elemdata.events
extracted_from_files
detected Domain: special.setup.call XIOC detected Domain: special.setup.call
extracted_from_files
detected Domain: special.add.call XIOC detected Domain: special.add.call
extracted_from_files
detected Domain: jquery.event.global XIOC detected Domain: jquery.event.global
extracted_from_files
detected Domain: special.remove.call XIOC detected Domain: special.remove.call
extracted_from_files
detected Domain: inner.style.top XIOC detected Domain: inner.style.top
extracted_from_files
detected Domain: jquery.data XIOC detected Domain: jquery.data
extracted_from_files
detected Domain: thiscache.data XIOC detected Domain: thiscache.data
extracted_from_files
detected Domain: privatecache.events XIOC detected Domain: privatecache.events
extracted_from_files
detected Domain: this.data XIOC detected Domain: this.data
extracted_from_files
detected Domain: defer.fire XIOC detected Domain: defer.fire
extracted_from_files
detected Domain: jquery.support.style XIOC detected Domain: jquery.support.style
extracted_from_files
detected Domain: exec.call XIOC detected Domain: exec.call
extracted_from_files
detected Domain: fn.call XIOC detected Domain: fn.call
extracted_from_files
detected Domain: value.call XIOC detected Domain: value.call
extracted_from_files
detected Domain: wrapmap.th XIOC detected Domain: wrapmap.th
extracted_from_files
detected Domain: func.call XIOC detected Domain: func.call
extracted_from_files
detected Domain: slicedeferred.call XIOC detected Domain: slicedeferred.call
extracted_from_files
detected Domain: jquery.support XIOC detected Domain: jquery.support
extracted_from_files
detected Domain: jquery.map XIOC detected Domain: jquery.map
extracted_from_files
detected Domain: callback.call XIOC detected Domain: callback.call
extracted_from_files
detected Domain: tostring.call XIOC detected Domain: tostring.call
extracted_from_files
detected Domain: hasown.call XIOC detected Domain: hasown.call
extracted_from_files
detected Domain: trim.call XIOC detected Domain: trim.call
extracted_from_files
detected Domain: push.call XIOC detected Domain: push.call
extracted_from_files
detected Domain: indexof.call XIOC detected Domain: indexof.call
extracted_from_files
detected Domain: www.iecss.com XIOC detected Domain: www.iecss.com
extracted_from_files
detected Domain: dev.w3.org XIOC detected Domain: dev.w3.org
extracted_from_files
detected Domain: erik.eae.net XIOC detected Domain: erik.eae.net
extracted_from_files
detected Domain: helpful.knobs-dials.com XIOC detected Domain: helpful.knobs-dials.com
extracted_from_files
detected Domain: jquery.fn.attr.call XIOC detected Domain: jquery.fn.attr.call
extracted_from_files
detected Domain: elem.id XIOC detected Domain: elem.id
extracted_from_files
detected Domain: slice.call XIOC detected Domain: slice.call
extracted_from_files
detected Domain: docs.jquery.com XIOC detected Domain: docs.jquery.com
extracted_from_files
detected Domain: javascript.nwbox.com XIOC detected Domain: javascript.nwbox.com
extracted_from_files
detected Domain: perfectionkills.com XIOC detected Domain: perfectionkills.com
extracted_from_files
detected Domain: developer.mozilla.org XIOC detected Domain: developer.mozilla.org
extracted_from_files
detected Domain: blindsignals.com XIOC detected Domain: blindsignals.com
extracted_from_files
detected Domain: fluidproject.org XIOC detected Domain: fluidproject.org
extracted_from_files
detected Domain: www.w3.org XIOC detected Domain: www.w3.org
extracted_from_files
detected IP: ::2 XIOC detected IP: ::2
extracted_from_files
detected IP: 8:: XIOC detected IP: 8::
extracted_from_files
detected Domain: jquery.com XIOC detected Domain: jquery.com
extracted_from_files
detected Domain: jquery.org XIOC detected Domain: jquery.org
extracted_from_files
detected Domain: sizzlejs.com XIOC detected Domain: sizzlejs.com
extracted_from_files
detected Domain: json.org XIOC detected Domain: json.org
extracted_from_files
detected Domain: m.id XIOC detected Domain: m.id
extracted_from_files
Security Analysis Summary
Security Analysis Overview
stackoverflowプラグイン v2.0 is a Chrome Web Store extension published by [email protected]. Version 2.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 49.94/100 (MEDIUM risk) based on 141 security findings.
Risk Assessment
This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.
Findings Breakdown
- High: 8 finding(s)
- Medium: 133 finding(s)
What Was Analyzed
The security assessment covers multiple analysis categories:
- Malware Detection: YARA rule matching against 2,400+ malware signatures
- Secret Detection: Scanning for exposed API keys, tokens, and credentials
- Static Analysis: Code-level security analysis for common vulnerability patterns
- Network Analysis: Detection of suspicious network communications and endpoints
- Obfuscation Detection: Identification of code obfuscation techniques
Developer Information
stackoverflowプラグイン v2.0 is published by [email protected] on the Chrome Web Store marketplace.
Recommendation
Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.
Source Code Not Available
Source code is not available for this version of the extension.
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace