Tracked campaign: searchjacked

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by socket.dev

Chrome Web Store

Freshy Recipes

by [email protected] · 2.0K users · 1.0 rating
a08737e2-f3a8-5e8b-8b2f-26d5678af8b4 | v1.21.1018
49/ 100
MEDIUM risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
3 months ago
Version
v1.21.1018
Artifact
SHA256 0AF…9B4
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

2 detail rows

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

4 total

Loading network indicators

IoC detail rows are loaded outside the initial page render.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

24
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
1
Portfolio

13 evidence rows available.

Finding Categories

1
Network
4
IoC Indicators

Requested Permissions

5 permissions
cookies

Read and modify cookies on all sites

High
tabs
Medium
topSites
Medium
storage
Low
*://*.freshyrecipes-api.com/*
Low

Security Analysis Summary

Security Analysis Overview

Freshy Recipes is a Chrome Web Store extension published by [email protected]. Version 1.21.1018 has been analyzed by the Risky Plugins security platform, receiving a risk score of 48.81/100 (MEDIUM risk) based on 6 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 6 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Freshy Recipes is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 2K users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

About This Extension

Get Recipes in your browser New Tab, the Extension provide easy way to add new recipes in your Cook Book from popular cooking sites. You can manager, view and print instructions from browser New Tab. The extension automatically parse recipes related data such as title, ingredients, instructions, cook time etc and provide easy to read and printable view of your recipe. This extension updates your browser New Tab and provides: - Search, View, Save and Print Recipes - List of Popular Recipes - Add Recipes to Cook Book - Links to TopSites By installing this extension, you agree to the Terms of Service (https://freshyrecipes-site.com/terms-of-service/) and Privacy Policy (https://freshyrecipes-site.com/privacy-policy/) Permissions used & reasons: "Read and change your data on a number of websites" For our extension to work, we require access to these websites we own and manage. "Replace the page you see when opening a new tab" This allows us to show you our product - new tab page. "Read your browsing history" This allows us to manage browser tabs and provide relevant product specific information.

Frequently Asked Questions