Chrome Web Store

Bubbly

by [email protected] · 30.0K users
9df61911-a2bb-5d97-a827-d4d40444373b | v1.1
43/ 100
MEDIUM risk
Risk verdict
Review before use

Score-based assessment (medium risk, 43/100). No analyst review available.

Analysis record

Analysed
1 months ago
Version
v1.1
Artifact
SHA256 18E…27D
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

5 detail rows

YARA Rule Matches

3 rules
SeverityRuleHitsFilesMetadata
LOWpostinstall crypto operations 1
_metadata/verified_contents.json
-
LOWpostinstall system command 3
style.cssmanifest.jsonpopup.css
-
LOWNoUseWeakRandom 1
script.js
-

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

35
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
2
Portfolio

12 evidence rows available.

Finding Categories

256
IoC Indicators

YARA Rules Matched

3 rules(5 hits)
postinstall crypto operations postinstall system command NoUseWeakRandom

Requested Permissions

2 permissions
storage
Low
search
Low

Security Analysis Summary

Security Analysis Overview

Bubbly is a Chrome Web Store extension published by [email protected]. Version 1.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 42.71/100 (MEDIUM risk) based on 261 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 256 finding(s)
  • Low: 5 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Bubbly is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 30K users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

About This Extension

BubblyBoard transforms your new tab page into a dynamic, customizable dashboard with bubbles linking to your favorite websites. Perfect for anyone looking to boost productivity or personalize their browsing experience, this Chrome extension adds a touch of fun and organization to your daily web visits. Key Features: - Customizable Bubbles: The extension displays three sections, each containing five bubbles linked to popular websites. Simply click on a bubble to instantly visit a site. - Easy Link Editing: Want to customize your bubbles? Just click on any bubble and enter your desired URL. BubblyBoard will save your changes, so the links will be exactly how you want them the next time you open a new tab. - Clock & Inspirational Quotes: Stay motivated with a clock showing the current time, and get a daily boost with inspiring quotes that refresh each time you open a new tab. - Persistent Settings: All your customizations are saved and ready to go every time you open a new tab. With BubblyBoard, your browser's new tab page becomes a fun, functional tool to keep you connected to what matters most.

Frequently Asked Questions