Is Berry Adblock - No Ads, More Berries. safe to use?

Berry Adblock - No Ads, More Berries. has a security risk score of 94.26/100 (CRITICAL risk). Our security analysis detected 448299 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Berry Adblock - No Ads, More Berries.?

Based on our automated security analysis, Berry Adblock - No Ads, More Berries. presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Chrome Web Store

Berry Adblock - No Ads, More Berries.

by [email protected]

ba1cebb2-2d41-5004-b601-4fbf7d12ed75 | v1.1.2

CRITICAL risk

Risk verdict

Do not install

Score-based assessment (critical risk, 94/100). No analyst review available.

Analysis record

Analysed: Yesterday
Version: v1.1.2
Artifact: SHA256 E33…2F5
Source: Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

514 detail rows

YARA Rule Matches

20 rules

Severity	Rule	Hits	Files	Metadata
HIGH	`hacked domains`	1	r/4.json	FP 10%
LOW	`postinstall obfuscation`	55	c/12.jsbackground.jsd/a.json +52 more	-
LOW	`postinstall network communication`	61	c/v.jsc/11.jsc/0.js +58 more	-
LOW	`credential steam data`	7	r/0.jsonr/6.jsond/1.json +4 more	-
LOW	`postinstall system command`	50	c/l.jsd/a.jsonc/8.js +47 more	-
LOW	`postinstall crypto operations`	46	d/9.jsonc/h.jsd/e.json +43 more	-
LOW	`postinstall registry modification`	6	r/0.jsonr/6.jsonr/7.json +3 more	-
LOW	`postinstall environment access`	3	popup/popup.jsbackground.jspages/updated.js	-
LOW	`postinstall file manipulation`	64	c/8.jsc/4.jsc/u.js +61 more	-
LOW	`function through object`	11	c/z.jsc/f.jsc/v.js +8 more	-
LOW	`DebuggerStatementsShouldNotBeUsed`	12	c/z.jsd/9.jsonr/0.json +9 more	-
LOW	`LocalStorageShouldNotBeUsed`	2	c/12.jsui/theme.js	-
LOW	`credential skype data`	8	r/4.jsonc/p.jsd/2.json +5 more	-
LOW	`postinstall persistence mechanism`	22	d/9.jsonr/7.jsonc/v.js +19 more	-
LOW	`credential env files`	13	c/g.jsd/7.jsonr/4.json +10 more	-
LOW	`WarpStrings`	5	r/4.jsonr/7.jsond/7.json +2 more	-
LOW	`Cerberus`	4	c/n.jsd/c.jsond/3.json +1 more	-
LOW	`postinstall file download`	57	c/5.jsc/d.jsd/7.json +54 more	-
LOW	`NoUseWeakRandom`	39	c/b.jsc/o.jsc/5.js +36 more	-
LOW	`NoUseEval`	36	c/10.jsc/h.jsc/x.js +33 more	-

Show network indicators (447,785)

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

Noisy-finding weight

x1.00

Publisher domain

No domain

Missing

Store verification signal

Limited signal

Limited

Extension portfolio

Portfolio

11 evidence rows available.

Finding Categories

Malware Signatures

Obfuscation

Network

447,785

IoC Indicators

YARA Rules Matched

20 rules(502 hits)

hacked domains postinstall obfuscation postinstall network communication credential steam data postinstall system command postinstall crypto operations postinstall registry modification postinstall environment access postinstall file manipulation function through object DebuggerStatementsShouldNotBeUsed LocalStorageShouldNotBeUsed credential skype data postinstall persistence mechanism credential env files WarpStrings +4 more

Requested Permissions

12 permissions

<all_urls>

Access and modify data on every website you visit

Dangerous

tabs

Medium

declarativeNetRequest

Low

declarativeNetRequestFeedback

Low

privacy

Low

storage

Low

unlimitedStorage

Low

scripting

Low

webNavigation

Low

alarms

Low

contextMenus

Low

favicon

Low

Security Analysis Summary

Security Analysis Overview

Berry Adblock - No Ads, More Berries. is a Chrome Web Store extension published by [email protected]. Version 1.1.2 has been analyzed by the Risky Plugins security platform, receiving a risk score of 94.26/100 (CRITICAL risk) based on 448299 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

Critical: 4 finding(s)
High: 1 finding(s)
Medium: 447793 finding(s)
Low: 501 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Berry Adblock - No Ads, More Berries. is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

About This Extension

Berry Adblock removes ads, trackers, pop-ups and malware from every site, and sites can't even tell it's there. 🫐 UNDETECTABLE Most ad blockers get caught: "Please disable your ad blocker" walls, blurred articles, videos that refuse to play. Berry hides itself from anti-adblock scripts, so pages simply load clean, as if ads were never there. 🫐 NO ADS, NO EMPTY GAPS • 580,000+ filters covering 30+ languages, updated automatically every day • No ads on YouTube and Twitch, including ads stitched into live streams • Pop-ups and pop-unders are closed before you see them • Removed ads leave no empty boxes behind 🫐 PRIVACY BUILT IN • Blocks trackers and known malware sites • Fingerprint protection: a new canvas, WebGL and audio fingerprint on every page load • WebRTC protection keeps your real IP address from leaking 🫐 YOU'RE IN CONTROL • Pause Berry on any site with one click • Allow a single blocked request right from the popup • Block any element on a page with the element picker • YouTube repeat button: repeat once or forever • Light and dark themes, backup and restore of your settings No account. No servers. No data collected. Everything runs on your device.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Edge Translate - Browser Translator | PDF Translation | MV3 | Open Source

[email protected]

CRITICAL 321 users

SlingPlayer for DISH Anywhere

Unknown Developer

CRITICAL 10K users

Edge Translate - Text Selection Translation

[email protected]

CRITICAL 1K users

Intelbras Cloud

[email protected]

CRITICAL 10K users

MV3前端助手

[email protected]

CRITICAL 9 users

【永久免费】TikTok爆单神器，商品自动提报采集邀评-种草星球

[email protected]

CRITICAL 6 users

Berry Adblock - No Ads, More Berries.

Analysis record

Evidence ledger

OBFUSCATION-PACKED_CODE-c/t.js-1

OBFUSCATION-PACKED_CODE-c/u.js-1

OBFUSCATION-PACKED_CODE-c/o.js-1

OBFUSCATION-PACKED_CODE-c/r.js-1

NET-FETCH-background.js-4

NET-XMLHTTPREQUEST-c/12.js-235

MANIFEST-SENSITIVE-PERM-TABS

NET-FETCH-c/12.js-495

OBFUSCATION-FROMCHARCODE_BULK-c/e.js-1

NET-FETCH-pages/updated.js-1

NET-AXIOS-c/5.js-1

NET-FETCH-background.js-1

YARA Rule Matches

Publisher Evidence

Finding Categories

YARA Rules Matched

Requested Permissions

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

About This Extension

Frequently Asked Questions

Similar Extensions

Edge Translate - Browser Translator | PDF Translation | MV3 | Open Source

SlingPlayer for DISH Anywhere

Edge Translate - Text Selection Translation

Intelbras Cloud

MV3前端助手

【永久免费】TikTok爆单神器，商品自动提报采集邀评-种草星球