Is "Compliment Machine" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.0

Need a pick-me-up? Click the Compliment Machine for a random compliment. No data collected, no permissions needed. Just good vibes.

Risk Assessment

Analyzed
40.75
out of 100
MEDIUM

5 security findings detected across all analyzers

Severity Breakdown

0
Critical
0
High
2
Medium
3
Low
0
Info

Finding Categories

2
IoC Indicators

YARA Rules Matched

3 rules
postinstall crypto operations NoUseWeakRandom postinstall system command

About This Extension

Need a pick-me-up? Click the Compliment Machine for a random compliment. No data collected, no permissions needed. Just good vibes.

Detailed Findings

3 total

YARA Rule Matches

3 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
1
Domains
1
Strings
2

All Indicators · 2

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Compliment Machine is a Chrome Web Store extension published by [email protected]. Version 1.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 40.75/100 (MEDIUM risk) based on 5 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 2 finding(s)
  • Low: 3 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Compliment Machine is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 1 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Frequently Asked Questions