Flagged in the threat library: Pomodorosearch

Our analysis confirmed the behaviour described in the threat library entry. Do not install it. Read the analysis and indicators →

Also reported by malext.io

Chrome Web Store

Pomodoro

by [email protected] · 80.0K users
92643690-bef7-5ae5-82a3-6fa1e34eb2db | v1.0
18/ 100
MINIMAL risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
1 months ago
Version
v1.0
Artifact
SHA256 C14…F09
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

1 detail row

YARA Rule Matches

1 rule
SeverityRuleHitsFilesMetadata
LOWpostinstall crypto operations 1
_metadata/verified_contents.json
-

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

40
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
2
Portfolio

12 evidence rows available.

Finding Categories

2
IoC Indicators

YARA Rules Matched

1 rule
postinstall crypto operations

Security Analysis Summary

Security Analysis Overview

Pomodoro is a Chrome Web Store extension published by [email protected]. Version 1.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 18.43/100 (MINIMAL risk) based on 3 security findings.

Risk Assessment

This extension presents minimal security concerns. The automated analysis found very few or no issues, suggesting it is suitable for general use.

Findings Breakdown

  • Medium: 2 finding(s)
  • Low: 1 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Pomodoro is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 80K users.

Recommendation

Based on the automated security analysis, this extension appears safe for general use. As with any extension, users should review the requested permissions before installation.

About This Extension

Transform your browser's search experience with Pomodoro Search - a simple, privacy-focused search extension that seamlessly integrates Yahoo search into your Chrome browser. 🔍 Key Features: Instant Yahoo search integration Zero data collection - your privacy matters Lightning-fast search results Simple one-click installation ✨ Why Choose Pomodoro Search? Make Yahoo your default search engine without any hassle. Our extension provides a straightforward way to access Yahoo's powerful search capabilities directly from your Chrome browser's address bar. 🔒 Privacy First: We take your privacy seriously. Pomodoro Search: - Doesn't collect any personal information - Doesn't track your searches - Doesn't store any user data 💫 Easy Setup: Install the extension Click 'Add to Chrome' That's it! Start searching with Yahoo instantly Perfect for users who prefer Yahoo's search results and want a clean, no-nonsense search experience.

Frequently Asked Questions