View Maps & Directions

AI Security Review

Evidence context: threat category none; evidence quality moderate.

The View Maps & Directions extension has raised concerns due to the presence of several YARA rule matches, including postinstall_obfuscation, postinstall_file_manipulation, postinstall_network_communication, postinstall_file_download, postinstall_system_command, and postinstall_crypto_operations. However, these findings are all classified as code-smell with a severity of high, and there are no malware signatures matched. The network findings, NET-FETCH-background.js-10 and NET-FETCH-background.js-11, indicate that the extension makes network calls of type 'fetch', but this is a common and legitimate behavior for many extensions. A skeptic might argue that the presence of these YARA rule matches indicates malicious behavior, but given that they are all code-smell findings and there are no malware signatures, it is more likely that these findings are false positives. The extension's developer name, [email protected], and the fact that it has 60,000 users, suggest that it is a legitimate extension. The strongest counterargument to this verdict is that the extension's code does contain some suspicious patterns, but without more specific evidence of malicious behavior, it is impossible to conclude that the extension is malicious. The absence of any IoC or malware findings, combined with the fact that the network findings are benign, suggests that this extension is likely a false positive. The extension's functionality, which allows users to get maps or driving directions directly in their Omni Search Box, does not appear to be malicious. In conclusion, while the extension's code does contain some suspicious patterns, the lack of specific evidence of malicious behavior, combined with the presence of a legitimate developer name and a large user base, suggests that this extension is likely a false positive.

Key Reasons

• No malware signatures matched
• Network findings are benign
• Developer name and user count suggest legitimacy

False Positive Considerations

• YARA rule matches
• code-smell findings

Reviewed 2026-05-23; recommended action: suppress false positive; model confidence 80%.