Is "Dezoomify V3" on Chrome Web Store Safe to Install?

[email protected] · chrome · v0.5

Dezoomify (https://dezoomify.ophir.dev/) is a terrific project by lovasoa (https://github.com/lovasoa) that lets you download full-resolution versions of zoomable images — the sort you often find on museum, library, and other archival websites. Because these images are massive, the sites often present them via smaller image tiles that are stitched together in real time. Dezoomify helps you unite all those tiles into a single downloadable image. There's also a dezoomify Chrome extension (https://lovasoa.github.io/dezoomify-extension/) that handles a key part of the process: detecting the exact url of the zoomable image on a given webpage so it can be handed off to dezoomify to process. Unfortunately, the extension hasn't been updated in years and still uses Chrome's deprecated Manifest V2, meaning it's been removed from the Chrome Web Store and unavailable for users. All this version of the dezoomify Chrome extension does is update it to Manifest V3 so it can be used again in Chrome and other recent Chromium browsers. The original README from lovasoa is below. See the source code at: https://github.com/jbenton/dezoomify-extension-chromefix/ --- Download zoomable images from web pages This browser extension detects zoomable images in web pages and allows you to download them. It works with the websites of many different museums, art galleries, libraries, and numerous other sources. How to use : - Install the extension - open a zoomable image in your browser - click the grey magnifying glass icon in the address bar - the icon should become blue, denoting that the extension is now actively listening for zoomable image requests - zoom into the image or reload the page - if the extension detects zoomable images, you should see a small badge appear over the icon specifying the number of images found - click the icon to open the image in the dezoomify website - click "dezoomify", and wait while the image downloads at maximal resolution - right-click on the downloaded image, and choose "Save As" to save it as a PNG file on your computer For more information about dezoomify, see: https://github.com/lovasoa/dezoomify

Risk Assessment

Analyzed
39.95
out of 100
LOW

91 security findings detected across all analyzers

Chrome extension requesting 4 permissions

Severity Breakdown

0
Critical
23
High
68
Medium
0
Low
0
Info

Finding Categories

23
Malware Signatures
68
IoC Indicators

YARA Rules Matched

10 rules(23 hits)
postinstall file download postinstall crypto operations postinstall system command postinstall obfuscation postinstall network communication WarpStrings postinstall persistence mechanism postinstall file manipulation postinstall environment access postinstall registry modification

Requested Permissions

4 permissions
<all_urls>

Access and modify data on every website you visit

Dangerous
webRequest

Intercept, modify, and block all network requests

High
activeTab
Medium
contextMenus
Low

About This Extension

Dezoomify (https://dezoomify.ophir.dev/) is a terrific project by lovasoa (https://github.com/lovasoa) that lets you download full-resolution versions of zoomable images — the sort you often find on museum, library, and other archival websites. Because these images are massive, the sites often present them via smaller image tiles that are stitched together in real time. Dezoomify helps you unite all those tiles into a single downloadable image. There's also a dezoomify Chrome extension (https://lovasoa.github.io/dezoomify-extension/) that handles a key part of the process: detecting the exact url of the zoomable image on a given webpage so it can be handed off to dezoomify to process. Unfortunately, the extension hasn't been updated in years and still uses Chrome's deprecated Manifest V2, meaning it's been removed from the Chrome Web Store and unavailable for users. All this version of the dezoomify Chrome extension does is update it to Manifest V3 so it can be used again in Chrome and other recent Chromium browsers. The original README from lovasoa is below. See the source code at: https://github.com/jbenton/dezoomify-extension-chromefix/ --- Download zoomable images from web pages This browser extension detects zoomable images in web pages and allows you to download them. It works with the websites of many different museums, art galleries, libraries, and numerous other sources. How to use : - Install the extension - open a zoomable image in your browser - click the grey magnifying glass icon in the address bar - the icon should become blue, denoting that the extension is now actively listening for zoomable image requests - zoom into the image or reload the page - if the extension detects zoomable images, you should see a small badge appear over the icon specifying the number of images found - click the icon to open the image in the dezoomify website - click "dezoomify", and wait while the image downloads at maximal resolution - right-click on the downloaded image, and choose "Save As" to save it as a PNG file on your computer For more information about dezoomify, see: https://github.com/lovasoa/dezoomify

Detailed Findings

23 total

YARA Rule Matches

10 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
45
IP Addresses
5
Domains
23
Strings
68

All Indicators · 68

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

Domain
detected Domain: developer.chrome.com

XIOC detected Domain: developer.chrome.com

extracted_from_files

URL
detected URL: https://github.com/lovasoa/dezoomify-extension.git

XIOC detected URL: https://github.com/lovasoa/dezoomify-extension.git

extracted_from_files

URL
detected URL: https://github.com/lovasoa/dezoomify-extension/issues

XIOC detected URL: https://github.com/lovasoa/dezoomify-extension/issues

extracted_from_files

URL
detected URL: https://github.com/lovasoa/dezoomify-extension#readme

XIOC detected URL: https://github.com/lovasoa/dezoomify-extension#readme

extracted_from_files

URL
detected URL: http://www.inkscape.org/namespaces/inkscape

XIOC detected URL: http://www.inkscape.org/namespaces/inkscape

extracted_from_files

URL
detected URL: http://purl.org/dc/dcmitype/StillImage

XIOC detected URL: http://purl.org/dc/dcmitype/StillImage

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://registry.npmjs.org/@types/chrome/-/chrome-0.0.154.tgz

XIOC detected URL: https://registry.npmjs.org/@types/chrome/-/chrome-0.0.154.tgz

extracted_from_files

URL
detected URL: https://registry.npmjs.org/@types/filesystem/-/filesystem-0.0.32.tgz

XIOC detected URL: https://registry.npmjs.org/@types/filesystem/-/filesystem-0.0.32.tgz

extracted_from_files

URL
detected URL: https://registry.npmjs.org/@types/filewriter/-/filewriter-0.0.29.tgz

XIOC detected URL: https://registry.npmjs.org/@types/filewriter/-/filewriter-0.0.29.tgz

extracted_from_files

URL
detected URL: https://registry.npmjs.org/@types/har-format/-/har-format-1.2.7.tgz

XIOC detected URL: https://registry.npmjs.org/@types/har-format/-/har-format-1.2.7.tgz

extracted_from_files

URL
detected URL: https://github.com/sponsors/lovasoa

XIOC detected URL: https://github.com/sponsors/lovasoa

extracted_from_files

URL
detected URL: http://purl.org/dc/elements/1.1/

XIOC detected URL: http://purl.org/dc/elements/1.1/

extracted_from_files

URL
detected URL: http://creativecommons.org/ns#

XIOC detected URL: http://creativecommons.org/ns#

extracted_from_files

URL
detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

XIOC detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

IP
detected Domain: sodipodi.sourceforge.net

XIOC detected Domain: sodipodi.sourceforge.net

extracted_from_files

URL
detected URL: http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd

XIOC detected URL: http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd

extracted_from_files

URL
detected URL: https://github.com/lovasoa/dezoomify#dezoomify).

XIOC detected URL: https://github.com/lovasoa/dezoomify#dezoomify).

extracted_from_files

URL
detected URL: https://github.com/lovasoa/dezoomify/wiki/Dezoomify-FAQ).

XIOC detected URL: https://github.com/lovasoa/dezoomify/wiki/Dezoomify-FAQ).

extracted_from_files

URL
detected URL: https://github.com/lovasoa/dezoomify-extension/issues/new).

XIOC detected URL: https://github.com/lovasoa/dezoomify-extension/issues/new).

extracted_from_files

URL
detected URL: https://github.com/lovasoa/dezoomify-extension/

XIOC detected URL: https://github.com/lovasoa/dezoomify-extension/

extracted_from_files

URL
detected URL: https://dezoomify.ophir.dev/#

XIOC detected URL: https://dezoomify.ophir.dev/#

extracted_from_files

URL
detected URL: https://github.com/lovasoa/dezoomify-extension/#dezoomify-extension

XIOC detected URL: https://github.com/lovasoa/dezoomify-extension/#dezoomify-extension

extracted_from_files

URL
detected URL: https://github.com/lovasoa/dezoomify-extension/issues/new

XIOC detected URL: https://github.com/lovasoa/dezoomify-extension/issues/new

extracted_from_files

URL
detected URL: https://github.com/lovasoa/dezoomify-extension/wiki/Illustrated-Guide-with-Screenshots)

XIOC detected URL: https://github.com/lovasoa/dezoomify-extension/wiki/Illustrated-Guide-with-Screenshots)

extracted_from_files

URL
detected URL: https://user-images.githubusercontent.com/552629/77237075-ea7c5400-6bc4-11ea-85fb-319a033c32f9.gif)](https://user-images.githubusercontent.com/552629/77237075-ea7c5400-6bc4-11ea-85fb-319a033c32f9.gif)

XIOC detected URL: https://user-images.githubusercontent.com/552629/77237075-ea7c5400-6bc4-11ea-85fb-319a033c32f9.gif)](https://user-images.githubusercontent.com/552629/77237075-ea7c5400-6bc4-11ea-85fb-319a033c32f9.gif)

extracted_from_files

URL
detected URL: https://github.com/lovasoa/dezoomify/wiki/Very-large-images),

XIOC detected URL: https://github.com/lovasoa/dezoomify/wiki/Very-large-images),

extracted_from_files

URL
detected URL: https://lovasoa.github.io/dezoomify-rs/)

XIOC detected URL: https://lovasoa.github.io/dezoomify-rs/)

extracted_from_files

URL
detected URL: https://addons.mozilla.org/en-US/firefox/addon/dezoomify/)

XIOC detected URL: https://addons.mozilla.org/en-US/firefox/addon/dezoomify/)

extracted_from_files

URL
detected URL: https://chrome.google.com/webstore/detail/dezoomify/iapjjopjejpelnfdonefbffahmcndfbm)

XIOC detected URL: https://chrome.google.com/webstore/detail/dezoomify/iapjjopjejpelnfdonefbffahmcndfbm)

extracted_from_files

URL
detected URL: https://github.com/lovasoa/dezoomify-extension/releases)

XIOC detected URL: https://github.com/lovasoa/dezoomify-extension/releases)

extracted_from_files

URL
detected URL: https://lovasoa.github.io/dezoomify-extension/)

XIOC detected URL: https://lovasoa.github.io/dezoomify-extension/)

extracted_from_files

URL
detected URL: https://addons.mozilla.org/en-US/firefox/addon/dezoomify/).)

XIOC detected URL: https://addons.mozilla.org/en-US/firefox/addon/dezoomify/).)

extracted_from_files

URL
detected URL: https://github.com/lovasoa/dezoomify-extension)

XIOC detected URL: https://github.com/lovasoa/dezoomify-extension)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/develop/migrate/mv2-deprecation-timeline),

XIOC detected URL: https://developer.chrome.com/docs/extensions/develop/migrate/mv2-deprecation-timeline),

extracted_from_files

URL
detected URL: https://chromewebstore.google.com/detail/dezoomify/iapjjopjejpelnfdonefbffahmcndfbm)

XIOC detected URL: https://chromewebstore.google.com/detail/dezoomify/iapjjopjejpelnfdonefbffahmcndfbm)

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/develop/migrate/mv2-deprecation-timeline)).

XIOC detected URL: https://developer.chrome.com/docs/extensions/develop/migrate/mv2-deprecation-timeline)).

extracted_from_files

URL
detected URL: https://github.com/lovasoa/dezoomify).

XIOC detected URL: https://github.com/lovasoa/dezoomify).

extracted_from_files

Domain
detected Domain: registry.npmjs.org

XIOC detected Domain: registry.npmjs.org

extracted_from_files

Domain
detected Domain: build.sh

XIOC detected Domain: build.sh

extracted_from_files

URL
detected URL: https://fsf.org/

XIOC detected URL: https://fsf.org/

extracted_from_files

URL
detected URL: https://www.gnu.org/licenses/

XIOC detected URL: https://www.gnu.org/licenses/

extracted_from_files

URL
detected URL: https://www.gnu.org/licenses/why-not-lgpl.html

XIOC detected URL: https://www.gnu.org/licenses/why-not-lgpl.html

extracted_from_files

URL
detected URL: https://dezoomify.ophir.dev/)

XIOC detected URL: https://dezoomify.ophir.dev/)

extracted_from_files

URL
detected URL: https://github.com/lovasoa)

XIOC detected URL: https://github.com/lovasoa)

extracted_from_files

IP
detected Domain: dezoomify.zip

XIOC detected Domain: dezoomify.zip

extracted_from_files

Domain
detected Domain: www.inkscape.org

XIOC detected Domain: www.inkscape.org

extracted_from_files

URL
detected Domain: purl.org

XIOC detected Domain: purl.org

extracted_from_files

Domain
detected Domain: creativecommons.org

XIOC detected Domain: creativecommons.org

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

URL
detected URL: http://www.w3.org/1999/xlink

XIOC detected URL: http://www.w3.org/1999/xlink

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: chromewebstore.google.com

XIOC detected Domain: chromewebstore.google.com

extracted_from_files

Domain
detected Domain: user-images.githubusercontent.com

XIOC detected Domain: user-images.githubusercontent.com

extracted_from_files

Domain
detected Domain: chrome.google.com

XIOC detected Domain: chrome.google.com

extracted_from_files

Domain
detected Domain: chrome.tabs.tab

XIOC detected Domain: chrome.tabs.tab

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain
detected Domain: this.tab

XIOC detected Domain: this.tab

extracted_from_files

Domain
detected Domain: this.tab.id

XIOC detected Domain: this.tab.id

extracted_from_files

Domain
detected Domain: fsf.org

XIOC detected Domain: fsf.org

extracted_from_files

Domain
detected Domain: www.gnu.org

XIOC detected Domain: www.gnu.org

extracted_from_files

Domain
detected Domain: dezoomify.ophir.dev

XIOC detected Domain: dezoomify.ophir.dev

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: lovasoa.github.io

XIOC detected Domain: lovasoa.github.io

extracted_from_files

Domain
detected Domain: addons.mozilla.org

XIOC detected Domain: addons.mozilla.org

extracted_from_files

URL
detected URL: https://registry.npmjs.org/typescript/-/typescript-4.3.5.tgz

XIOC detected URL: https://registry.npmjs.org/typescript/-/typescript-4.3.5.tgz

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Dezoomify V3 is a Chrome Web Store extension published by [email protected]. Version 0.5 has been analyzed by the Risky Plugins security platform, receiving a risk score of 39.95/100 (LOW risk) based on 91 security findings.

Risk Assessment

This extension presents low security risk. Some minor findings were detected, but nothing that would prevent typical usage. Reviewing the detailed findings below is recommended before use in sensitive environments.

Findings Breakdown

  • High: 23 finding(s)
  • Medium: 68 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Dezoomify V3 is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 1K users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Frequently Asked Questions