Is "Tabalanche" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.2.1

Tabalanche is an extension that lets you stash away tabs for pages you don't need right now, so you can focus on what matters and get back to the rest later. For power users, Tabalanche is designed to stay quick, smooth, and easy to use, no matter how much you throw at it. Unlike other extensions built for managing tabs that creak and moan after a few months of heavy use, Tabalanche performs as quick as it was on day one, even after years of stashing away hundreds of tabs a week. Tabalanche is entirely human-authored, open-source software, with no ads, tracking, or in-app purchases of any kind.

Risk Assessment

Analyzed
84.75
out of 100
HIGH

393 security findings detected across all analyzers

Chrome extension requesting 3 permissions

Severity Breakdown

0
Critical
0
High
342
Medium
51
Low
0
Info

Finding Categories

7
Network
332
IoC Indicators

YARA Rules Matched

14 rules(51 hits)
postinstall network communication postinstall persistence mechanism credential env files NoUseWeakRandom postinstall crypto operations DebuggerStatementsShouldNotBeUsed postinstall obfuscation LocalStorageShouldNotBeUsed postinstall file manipulation postinstall file download postinstall system command postinstall registry modification NoUseEval SQLInjection

Requested Permissions

3 permissions
tabs
Medium
storage
Low
favicon
Low

About This Extension

Tabalanche is an extension that lets you stash away tabs for pages you don't need right now, so you can focus on what matters and get back to the rest later. For power users, Tabalanche is designed to stay quick, smooth, and easy to use, no matter how much you throw at it. Unlike other extensions built for managing tabs that creak and moan after a few months of heavy use, Tabalanche performs as quick as it was on day one, even after years of stashing away hundreds of tabs a week. Tabalanche is entirely human-authored, open-source software, with no ads, tracking, or in-app purchases of any kind.

Detailed Findings

59 total

YARA Rule Matches

14 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
83
IP Addresses
10
Domains
243
Strings
332

All Indicators · 332

Domain
detected Domain: change.id

XIOC detected Domain: change.id

extracted_from_files

Domain
detected Domain: www.gnu.org

XIOC detected Domain: www.gnu.org

extracted_from_files

Domain
detected Domain: fsf.org

XIOC detected Domain: fsf.org

extracted_from_files

IP
detected IP: 4.2.1.2

XIOC detected IP: 4.2.1.2

extracted_from_files

Domain
detected Domain: csc3-2009-2-crl.verisign.com

XIOC detected Domain: csc3-2009-2-crl.verisign.com

extracted_from_files

Domain
detected Domain: logo.verisign.com

XIOC detected Domain: logo.verisign.com

extracted_from_files

Domain
detected Domain: crl.verisign.com

XIOC detected Domain: crl.verisign.com

extracted_from_files

Domain
detected Domain: ocsp.verisign.com

XIOC detected Domain: ocsp.verisign.com

extracted_from_files

Domain
detected Domain: www.apache.org

XIOC detected Domain: www.apache.org

extracted_from_files

Domain
detected Domain: corporation.open

XIOC detected Domain: corporation.open

extracted_from_files

Domain
detected Domain: www.verisign.com

XIOC detected Domain: www.verisign.com

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

URL
detected Domain: purl.org

XIOC detected Domain: purl.org

extracted_from_files

Domain
detected Domain: creativecommons.org

XIOC detected Domain: creativecommons.org

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

IP
detected Domain: sodipodi.sourceforge.net

XIOC detected Domain: sodipodi.sourceforge.net

extracted_from_files

Domain
detected Domain: www.inkscape.org

XIOC detected Domain: www.inkscape.org

extracted_from_files

Domain
detected Domain: csc3-2009-2-aia.verisign.com

XIOC detected Domain: csc3-2009-2-aia.verisign.com

extracted_from_files

Domain
detected Domain: olddb.info

XIOC detected Domain: olddb.info

extracted_from_files

Domain
detected Domain: stashdoc.name

XIOC detected Domain: stashdoc.name

extracted_from_files

Domain
detected Domain: stashdoc.tabs.map

XIOC detected Domain: stashdoc.tabs.map

extracted_from_files

Domain
detected Domain: err.name

XIOC detected Domain: err.name

extracted_from_files

Domain
detected Domain: discourse.wicg.io

XIOC detected Domain: discourse.wicg.io

extracted_from_files

Domain
detected Domain: stackoverflow.com

XIOC detected Domain: stackoverflow.com

extracted_from_files

Domain
detected Domain: www.tabalanche.com

XIOC detected Domain: www.tabalanche.com

extracted_from_files

Domain
detected Domain: response.rows.map

XIOC detected Domain: response.rows.map

extracted_from_files

Domain
detected Domain: response.id

XIOC detected Domain: response.id

extracted_from_files

Domain
detected Domain: browser.runtime.id

XIOC detected Domain: browser.runtime.id

extracted_from_files

Domain
detected Domain: tabs.map

XIOC detected Domain: tabs.map

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain
detected Domain: crwindow.id

XIOC detected Domain: crwindow.id

extracted_from_files

Domain
detected Domain: developer.chrome.com

XIOC detected Domain: developer.chrome.com

extracted_from_files

Domain
detected Domain: browser-polyfill.js.map

XIOC detected Domain: browser-polyfill.js.map

extracted_from_files

Domain
detected Domain: wrapper.call

XIOC detected Domain: wrapper.call

extracted_from_files

Domain
detected Domain: globalthis.browser.runtime.id

XIOC detected Domain: globalthis.browser.runtime.id

extracted_from_files

Domain
detected Domain: globalthis.chrome.runtime.id

XIOC detected Domain: globalthis.chrome.runtime.id

extracted_from_files

Domain
detected Domain: globalthis.chrome

XIOC detected Domain: globalthis.chrome

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: mozilla.org

XIOC detected Domain: mozilla.org

extracted_from_files

Domain
detected Domain: code.google.com

XIOC detected Domain: code.google.com

extracted_from_files

Domain
detected Domain: wiki.apache.org

XIOC detected Domain: wiki.apache.org

extracted_from_files

Domain
detected Domain: pouchdb.com

XIOC detected Domain: pouchdb.com

extracted_from_files

Domain
detected Domain: elem.style

XIOC detected Domain: elem.style

extracted_from_files

Domain
detected Domain: opts.style

XIOC detected Domain: opts.style

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain
detected Domain: opts.id

XIOC detected Domain: opts.id

extracted_from_files

Domain
detected Domain: www.myersdaily.org

XIOC detected Domain: www.myersdaily.org

extracted_from_files

Domain
detected Domain: www.broofa.com

XIOC detected Domain: www.broofa.com

extracted_from_files

Domain
detected Domain: guide.couchdb.org

XIOC detected Domain: guide.couchdb.org

extracted_from_files

Domain
detected Domain: bugzilla.mozilla.org

XIOC detected Domain: bugzilla.mozilla.org

extracted_from_files

Domain
detected Domain: www.dashbay.com

XIOC detected Domain: www.dashbay.com

extracted_from_files

Domain
detected Domain: bugs.webkit.org

XIOC detected Domain: bugs.webkit.org

extracted_from_files

Domain
detected Domain: developer.mozilla.org

XIOC detected Domain: developer.mozilla.org

extracted_from_files

Domain
detected Domain: res.total

XIOC detected Domain: res.total

extracted_from_files

Domain
detected Domain: finalresults.total

XIOC detected Domain: finalresults.total

extracted_from_files

Domain
detected Domain: keys.map

XIOC detected Domain: keys.map

extracted_from_files

Domain
detected Domain: edge.to

XIOC detected Domain: edge.to

extracted_from_files

Domain
detected Domain: utils.compare

XIOC detected Domain: utils.compare

extracted_from_files

Domain
detected Domain: connect.microsoft.com

XIOC detected Domain: connect.microsoft.com

extracted_from_files

Domain
detected Domain: jsperf.com

XIOC detected Domain: jsperf.com

extracted_from_files

Domain
detected Domain: arr.ids.map

XIOC detected Domain: arr.ids.map

extracted_from_files

Domain
detected Domain: opts.open

XIOC detected Domain: opts.open

extracted_from_files

Domain
detected Domain: row.id

XIOC detected Domain: row.id

extracted_from_files

Domain
detected Domain: ids.map

XIOC detected Domain: ids.map

extracted_from_files

Domain
detected Domain: utils.map

XIOC detected Domain: utils.map

extracted_from_files

Domain
detected Domain: abstractpouchdb.prototype.post

XIOC detected Domain: abstractpouchdb.prototype.post

extracted_from_files

Domain
detected Domain: eventemitter.call

XIOC detected Domain: eventemitter.call

extracted_from_files

Domain
detected Domain: self.auto

XIOC detected Domain: self.auto

extracted_from_files

Domain
detected Domain: info.auto

XIOC detected Domain: info.auto

extracted_from_files

Domain
detected Domain: abstractpouchdb.prototype.info

XIOC detected Domain: abstractpouchdb.prototype.info

extracted_from_files

Domain
detected Domain: att.data

XIOC detected Domain: att.data

extracted_from_files

Domain
detected Domain: rev.id

XIOC detected Domain: rev.id

extracted_from_files

Domain
detected Domain: path.ids.map

XIOC detected Domain: path.ids.map

extracted_from_files

Domain
detected Domain: x.id

XIOC detected Domain: x.id

extracted_from_files

Domain
detected Domain: opts.name

XIOC detected Domain: opts.name

extracted_from_files

Domain
detected Domain: opts.host

XIOC detected Domain: opts.host

extracted_from_files

Domain
detected Domain: attachment.data

XIOC detected Domain: attachment.data

extracted_from_files

Domain
detected Domain: req.new

XIOC detected Domain: req.new

extracted_from_files

Domain
detected Domain: opts.new

XIOC detected Domain: opts.new

extracted_from_files

Domain
detected Domain: req.docs

XIOC detected Domain: req.docs

extracted_from_files

Domain
detected Domain: abstractpouchdb.prototype.id

XIOC detected Domain: abstractpouchdb.prototype.id

extracted_from_files

Domain
detected Domain: docordocs.map

XIOC detected Domain: docordocs.map

extracted_from_files

Domain
detected Domain: filenames.map

XIOC detected Domain: filenames.map

extracted_from_files

Domain
detected Domain: res.host

XIOC detected Domain: res.host

extracted_from_files

Domain
detected Domain: subopts.docs

XIOC detected Domain: subopts.docs

extracted_from_files

Domain
detected Domain: opts.docs

XIOC detected Domain: opts.docs

extracted_from_files

Domain
detected Domain: api.info

XIOC detected Domain: api.info

extracted_from_files

Domain
detected Domain: api.id

XIOC detected Domain: api.id

extracted_from_files

Domain
detected Domain: meta.name

XIOC detected Domain: meta.name

extracted_from_files

Domain
detected Domain: docinfo.metadata.id

XIOC detected Domain: docinfo.metadata.id

extracted_from_files

Domain
detected Domain: metadata.id

XIOC detected Domain: metadata.id

extracted_from_files

Domain
detected Domain: idbconstants.by

XIOC detected Domain: idbconstants.by

extracted_from_files

Domain
detected Domain: params.style

XIOC detected Domain: params.style

extracted_from_files

Domain
detected Domain: req.docs.map

XIOC detected Domain: req.docs.map

extracted_from_files

Domain
detected Domain: api.post

XIOC detected Domain: api.post

extracted_from_files

Domain
detected Domain: opts.storage

XIOC detected Domain: opts.storage

extracted_from_files

Domain
detected Domain: cached.global

XIOC detected Domain: cached.global

extracted_from_files

Domain
detected Domain: error.id

XIOC detected Domain: error.id

extracted_from_files

Domain
detected Domain: storedobject.data

XIOC detected Domain: storedobject.data

extracted_from_files

Domain
detected Domain: exports.by

XIOC detected Domain: exports.by

extracted_from_files

Domain
detected Domain: api.auto

XIOC detected Domain: api.auto

extracted_from_files

Domain
detected Domain: docinfo.data

XIOC detected Domain: docinfo.data

extracted_from_files

Domain
detected Domain: websqlconstants.by

XIOC detected Domain: websqlconstants.by

extracted_from_files

Domain
detected Domain: constants.by

XIOC detected Domain: constants.by

extracted_from_files

Domain
detected Domain: attnames.map

XIOC detected Domain: attnames.map

extracted_from_files

Domain
detected Domain: results.map

XIOC detected Domain: results.map

extracted_from_files

Domain
detected Domain: evt.target.error.name

XIOC detected Domain: evt.target.error.name

extracted_from_files

Domain
detected Domain: evt.target

XIOC detected Domain: evt.target

extracted_from_files

Domain
detected Domain: indexeddb.open

XIOC detected Domain: indexeddb.open

extracted_from_files

Domain
detected Domain: digeststocheck.map

XIOC detected Domain: digeststocheck.map

extracted_from_files

Domain
detected Domain: seqs.map

XIOC detected Domain: seqs.map

extracted_from_files

Domain
detected Domain: item.data

XIOC detected Domain: item.data

extracted_from_files

Domain
detected Domain: db.id

XIOC detected Domain: db.id

extracted_from_files

Domain
detected Domain: row.data

XIOC detected Domain: row.data

extracted_from_files

Domain
detected Domain: userdocs.map

XIOC detected Domain: userdocs.map

extracted_from_files

Domain
detected Domain: websqlutils.select

XIOC detected Domain: websqlutils.select

extracted_from_files

Domain
detected Domain: opts.auto

XIOC detected Domain: opts.auto

extracted_from_files

Domain
detected Domain: eventemitter.prototype.removelistener.call

XIOC detected Domain: eventemitter.prototype.removelistener.call

extracted_from_files

Domain
detected Domain: err.id

XIOC detected Domain: err.id

extracted_from_files

Domain
detected Domain: this.db.info

XIOC detected Domain: this.db.info

extracted_from_files

Domain
detected Domain: opts.live

XIOC detected Domain: opts.live

extracted_from_files

Domain
detected Domain: ee.call

XIOC detected Domain: ee.call

extracted_from_files

Domain
detected Domain: event.target

XIOC detected Domain: event.target

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: console.info

XIOC detected Domain: console.info

extracted_from_files

Domain
detected Domain: obj.map

XIOC detected Domain: obj.map

extracted_from_files

Domain
detected Domain: self.replicate.to

XIOC detected Domain: self.replicate.to

extracted_from_files

Domain
detected Domain: self.taskqueue.fail

XIOC detected Domain: self.taskqueue.fail

extracted_from_files

Domain
detected Domain: backend.name

XIOC detected Domain: backend.name

extracted_from_files

Domain
detected Domain: adapter.call

XIOC detected Domain: adapter.call

extracted_from_files

Domain
detected Domain: tree.map

XIOC detected Domain: tree.map

extracted_from_files

Domain
detected Domain: docrequests.map

XIOC detected Domain: docrequests.map

extracted_from_files

Domain
detected Domain: docopts.open

XIOC detected Domain: docopts.open

extracted_from_files

Domain
detected Domain: res.id

XIOC detected Domain: res.id

extracted_from_files

Domain
detected Domain: request.id

XIOC detected Domain: request.id

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: xhr.open

XIOC detected Domain: xhr.open

extracted_from_files

Domain
detected Domain: res.name

XIOC detected Domain: res.name

extracted_from_files

Domain
detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain
detected Domain: error.call

XIOC detected Domain: error.call

extracted_from_files

Domain
detected Domain: currentdoc.metadata.id

XIOC detected Domain: currentdoc.metadata.id

extracted_from_files

Domain
detected Domain: collections.map

XIOC detected Domain: collections.map

extracted_from_files

Domain
detected Domain: result.data

XIOC detected Domain: result.data

extracted_from_files

Domain
detected Domain: revinfo.id

XIOC detected Domain: revinfo.id

extracted_from_files

Domain
detected Domain: function.prototype.bind.call

XIOC detected Domain: function.prototype.bind.call

extracted_from_files

Domain
detected Domain: db.auto

XIOC detected Domain: db.auto

extracted_from_files

Domain
detected Domain: sourcedb.info

XIOC detected Domain: sourcedb.info

extracted_from_files

Domain
detected Domain: opts.map

XIOC detected Domain: opts.map

extracted_from_files

Domain
detected Domain: broofa.com

XIOC detected Domain: broofa.com

extracted_from_files

Domain
detected Domain: stevenlevithan.com

XIOC detected Domain: stevenlevithan.com

extracted_from_files

Domain
detected Domain: node.id

XIOC detected Domain: node.id

extracted_from_files

Domain
detected Domain: rows.map

XIOC detected Domain: rows.map

extracted_from_files

Domain
detected Domain: res.rows.map

XIOC detected Domain: res.rows.map

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: obj.id

XIOC detected Domain: obj.id

extracted_from_files

Domain
detected Domain: view.name

XIOC detected Domain: view.name

extracted_from_files

Domain
detected Domain: docids.map

XIOC detected Domain: docids.map

extracted_from_files

Domain
detected Domain: options.group

XIOC detected Domain: options.group

extracted_from_files

Domain
detected Domain: target.id

XIOC detected Domain: target.id

extracted_from_files

Domain
detected Domain: src.id

XIOC detected Domain: src.id

extracted_from_files

Domain
detected Domain: self.id

XIOC detected Domain: self.id

extracted_from_files

Domain
detected Domain: this.id

XIOC detected Domain: this.id

extracted_from_files

Domain
detected Domain: this.target

XIOC detected Domain: this.target

extracted_from_files

IP
detected Domain: scripts.sil.org

XIOC detected Domain: scripts.sil.org

extracted_from_files

Domain
detected Domain: dbstodelete.map

XIOC detected Domain: dbstodelete.map

extracted_from_files

Domain
detected Domain: change.changes.map

XIOC detected Domain: change.changes.map

extracted_from_files

Domain
detected Domain: changesopts.live

XIOC detected Domain: changesopts.live

extracted_from_files

Domain
detected Domain: outresult.docs

XIOC detected Domain: outresult.docs

extracted_from_files

Domain
detected Domain: error.name

XIOC detected Domain: error.name

extracted_from_files

Domain
detected Domain: result.docs

XIOC detected Domain: result.docs

extracted_from_files

Domain
detected Domain: currentbatch.docs

XIOC detected Domain: currentbatch.docs

extracted_from_files

Domain
detected Domain: exports.storage

XIOC detected Domain: exports.storage

extracted_from_files

Domain
detected Domain: exports.save

XIOC detected Domain: exports.save

extracted_from_files

Domain
detected Domain: fun.call

XIOC detected Domain: fun.call

extracted_from_files

Domain
detected Domain: exports.compare

XIOC detected Domain: exports.compare

extracted_from_files

Domain
detected Domain: exports.map

XIOC detected Domain: exports.map

extracted_from_files

Domain
detected Domain: taskqueue.prototype.fail

XIOC detected Domain: taskqueue.prototype.fail

extracted_from_files

Domain
detected Domain: pouchdb.call

XIOC detected Domain: pouchdb.call

extracted_from_files

Domain
detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

Domain
detected Domain: element.data

XIOC detected Domain: element.data

extracted_from_files

Domain
detected Domain: handler.call

XIOC detected Domain: handler.call

extracted_from_files

Domain
detected Domain: formatter.call

XIOC detected Domain: formatter.call

extracted_from_files

Domain
detected Domain: function.prototype.apply.call

XIOC detected Domain: function.prototype.apply.call

extracted_from_files

Domain
detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain
detected Domain: document.documentelement.style

XIOC detected Domain: document.documentelement.style

extracted_from_files

Domain
detected Domain: pajhome.org.uk

XIOC detected Domain: pajhome.org.uk

extracted_from_files

Domain
detected Domain: opensource.org

XIOC detected Domain: opensource.org

extracted_from_files

Domain
detected Domain: blueimp.net

XIOC detected Domain: blueimp.net

extracted_from_files

Domain
detected Domain: process.off

XIOC detected Domain: process.off

extracted_from_files

Domain
detected Domain: item.prototype.run

XIOC detected Domain: item.prototype.run

extracted_from_files

Domain
detected Domain: this.fun

XIOC detected Domain: this.fun

extracted_from_files

Domain
detected Domain: this.store

XIOC detected Domain: this.store

extracted_from_files

Domain
detected Domain: bind.call

XIOC detected Domain: bind.call

extracted_from_files

Domain
detected Domain: this.listener.call

XIOC detected Domain: this.listener.call

extracted_from_files

Domain
detected Domain: w.name

XIOC detected Domain: w.name

extracted_from_files

Domain
detected Domain: msdn.microsoft.com

XIOC detected Domain: msdn.microsoft.com

extracted_from_files

Domain
detected Domain: unpkg.com

XIOC detected Domain: unpkg.com

extracted_from_files

Domain
detected Domain: docs.python.org

XIOC detected Domain: docs.python.org

extracted_from_files

Domain
detected Domain: www.movable-type.co.uk

XIOC detected Domain: www.movable-type.co.uk

extracted_from_files

Domain
detected Domain: functostring.call

XIOC detected Domain: functostring.call

extracted_from_files

Domain
detected Domain: generateuuid.name

XIOC detected Domain: generateuuid.name

extracted_from_files

Domain
detected Domain: sparkmd5.prototype.setstate.call

XIOC detected Domain: sparkmd5.prototype.setstate.call

extracted_from_files

Domain
detected Domain: sparkmd5.prototype.getstate.call

XIOC detected Domain: sparkmd5.prototype.getstate.call

extracted_from_files

Domain
detected Domain: cachedcleartimeout.call

XIOC detected Domain: cachedcleartimeout.call

extracted_from_files

Domain
detected Domain: cachedsettimeout.call

XIOC detected Domain: cachedsettimeout.call

extracted_from_files

Domain
detected Domain: listenercount.call

XIOC detected Domain: listenercount.call

extracted_from_files

Domain
detected Domain: this.info

XIOC detected Domain: this.info

extracted_from_files

Domain
detected Domain: 1.id

XIOC detected Domain: 1.id

extracted_from_files

Domain
detected Domain: this.post

XIOC detected Domain: this.post

extracted_from_files

Domain
detected Domain: historynode.id

XIOC detected Domain: historynode.id

extracted_from_files

Domain
detected Domain: function.prototype.name

XIOC detected Domain: function.prototype.name

extracted_from_files

Domain
detected Domain: err.data

XIOC detected Domain: err.data

extracted_from_files

Domain
detected Domain: self.name

XIOC detected Domain: self.name

extracted_from_files

Domain
detected Domain: updatedtask.total

XIOC detected Domain: updatedtask.total

extracted_from_files

Domain
detected Domain: task.id

XIOC detected Domain: task.id

extracted_from_files

Domain
detected Domain: task.total

XIOC detected Domain: task.total

extracted_from_files

Domain
detected Domain: task.name

XIOC detected Domain: task.name

extracted_from_files

Domain
detected Domain: setup.call

XIOC detected Domain: setup.call

extracted_from_files

Domain
detected Domain: this.taskqueue.fail

XIOC detected Domain: this.taskqueue.fail

extracted_from_files

Domain
detected Domain: this.auto

XIOC detected Domain: this.auto

extracted_from_files

Domain
detected Domain: info.host

XIOC detected Domain: info.host

extracted_from_files

Domain
detected Domain: result.data.map

XIOC detected Domain: result.data.map

extracted_from_files

Domain
detected Domain: paramkeys.map

XIOC detected Domain: paramkeys.map

extracted_from_files

Domain
detected Domain: keyrangeerror.name

XIOC detected Domain: keyrangeerror.name

extracted_from_files

Domain
detected Domain: tostring.call

XIOC detected Domain: tostring.call

extracted_from_files

Domain
detected Domain: sort.map

XIOC detected Domain: sort.map

extracted_from_files

Domain
detected Domain: db.name

XIOC detected Domain: db.name

extracted_from_files

Domain
detected Domain: result.id

XIOC detected Domain: result.id

extracted_from_files

Domain
detected Domain: emittedkeyvalue.id

XIOC detected Domain: emittedkeyvalue.id

extracted_from_files

Domain
detected Domain: uniquepurges.map

XIOC detected Domain: uniquepurges.map

extracted_from_files

Domain
detected Domain: view.sourcedb.info

XIOC detected Domain: view.sourcedb.info

extracted_from_files

Domain
detected Domain: opts.group

XIOC detected Domain: opts.group

extracted_from_files

Domain
detected Domain: res.data

XIOC detected Domain: res.data

extracted_from_files

Domain
detected Domain: params.open

XIOC detected Domain: params.open

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Domain
detected Domain: fatalerror.name

XIOC detected Domain: fatalerror.name

extracted_from_files

Domain
detected Domain: src.info

XIOC detected Domain: src.info

extracted_from_files

Domain
detected Domain: bulkgetinfo.docs.map

XIOC detected Domain: bulkgetinfo.docs.map

extracted_from_files

Domain
detected Domain: bulkgetresponse.results.map

XIOC detected Domain: bulkgetresponse.results.map

extracted_from_files

Domain
detected Domain: abstract.viewcleanup.call

XIOC detected Domain: abstract.viewcleanup.call

extracted_from_files

Domain
detected Domain: abstract.query.call

XIOC detected Domain: abstract.query.call

extracted_from_files

URL
detected URL: http://www.apache.org/licenses/LICENSE-2.0

XIOC detected URL: http://www.apache.org/licenses/LICENSE-2.0

extracted_from_files

URL
detected URL: http://www.ascendercorp.com/http://www.ascendercorp.com/typedesigners.htmlLicensed

XIOC detected URL: http://www.ascendercorp.com/http://www.ascendercorp.com/typedesigners.htmlLicensed

extracted_from_files

URL
detected URL: http://scripts.sil.org/OFL

XIOC detected URL: http://scripts.sil.org/OFL

extracted_from_files

URL
detected URL: http://www.gnu.org/philosophy/why-not-lgpl.html

XIOC detected URL: http://www.gnu.org/philosophy/why-not-lgpl.html

extracted_from_files

URL
detected URL: http://www.gnu.org/licenses/

XIOC detected URL: http://www.gnu.org/licenses/

extracted_from_files

URL
detected URL: http://fsf.org/

XIOC detected URL: http://fsf.org/

extracted_from_files

URL
detected URL: http://logo.verisign.com/vslogo.gif0

XIOC detected URL: http://logo.verisign.com/vslogo.gif0

extracted_from_files

URL
detected URL: https://www.verisign.com/cps0*

XIOC detected URL: https://www.verisign.com/cps0*

extracted_from_files

Domain
detected Domain: gmail.com

XIOC detected Domain: gmail.com

extracted_from_files

URL
detected URL: http://ocsp.verisign.com0

XIOC detected URL: http://ocsp.verisign.com0

extracted_from_files

URL
detected URL: http://crl.verisign.com/tss-ca.crl0

XIOC detected URL: http://crl.verisign.com/tss-ca.crl0

extracted_from_files

URL
detected URL: http://www.w3.org/1999/xlink

XIOC detected URL: http://www.w3.org/1999/xlink

extracted_from_files

URL
detected URL: http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd

XIOC detected URL: http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd

extracted_from_files

URL
detected URL: http://www.inkscape.org/namespaces/inkscape

XIOC detected URL: http://www.inkscape.org/namespaces/inkscape

extracted_from_files

URL
detected URL: http://www.inkscape.org/)

XIOC detected URL: http://www.inkscape.org/)

extracted_from_files

URL
detected URL: http://ocsp.verisign.com0?

XIOC detected URL: http://ocsp.verisign.com0?

extracted_from_files

URL
detected URL: https://www.verisign.com/rpa0

XIOC detected URL: https://www.verisign.com/rpa0

extracted_from_files

URL
detected URL: http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl0D

XIOC detected URL: http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl0D

extracted_from_files

URL
detected URL: https://www.tabalanche.com/

XIOC detected URL: https://www.tabalanche.com/

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: http://purl.org/dc/dcmitype/StillImage

XIOC detected URL: http://purl.org/dc/dcmitype/StillImage

extracted_from_files

URL
detected URL: http://purl.org/dc/elements/1.1/

XIOC detected URL: http://purl.org/dc/elements/1.1/

extracted_from_files

URL
detected URL: http://creativecommons.org/ns#

XIOC detected URL: http://creativecommons.org/ns#

extracted_from_files

URL
detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

XIOC detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg';

XIOC detected URL: http://www.w3.org/2000/svg';

extracted_from_files

URL
detected URL: https://github.com/mozilla/webextension-polyfill/issues/130

XIOC detected URL: https://github.com/mozilla/webextension-polyfill/issues/130

extracted_from_files

URL
detected URL: http://mozilla.org/MPL/2.0/.

XIOC detected URL: http://mozilla.org/MPL/2.0/.

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/how-to/ui/favicons

XIOC detected URL: https://developer.chrome.com/docs/extensions/how-to/ui/favicons

extracted_from_files

URL
detected URL: http://discourse.wicg.io/t/cross-window-session-storage/943

XIOC detected URL: http://discourse.wicg.io/t/cross-window-session-storage/943

extracted_from_files

URL
detected URL: https://discourse.wicg.io/t/ui-events-wd-compliance/933/

XIOC detected URL: https://discourse.wicg.io/t/ui-events-wd-compliance/933/

extracted_from_files

URL
detected URL: http://stackoverflow.com/q/20087368

XIOC detected URL: http://stackoverflow.com/q/20087368

extracted_from_files

URL
detected URL: https://code.google.com/p/chromium/issues/detail?id=447836

XIOC detected URL: https://code.google.com/p/chromium/issues/detail?id=447836

extracted_from_files

URL
detected URL: https://code.google.com/p/chromium/issues/detail?id=447916

XIOC detected URL: https://code.google.com/p/chromium/issues/detail?id=447916

extracted_from_files

URL
detected URL: http://wiki.apache.org/couchdb/HttpPostRevsDiff

XIOC detected URL: http://wiki.apache.org/couchdb/HttpPostRevsDiff

extracted_from_files

URL
detected URL: http://wiki.apache.org/couchdb/HTTP_view_API#Querying_Options

XIOC detected URL: http://wiki.apache.org/couchdb/HTTP_view_API#Querying_Options

extracted_from_files

URL
detected URL: http://stackoverflow.com/a/417184/680742,

XIOC detected URL: http://stackoverflow.com/a/417184/680742,

extracted_from_files

URL
detected URL: https://github.com/apache/couchdb-chttpd/pull/33

XIOC detected URL: https://github.com/apache/couchdb-chttpd/pull/33

extracted_from_files

URL
detected URL: http://pouchdb.com

XIOC detected URL: http://pouchdb.com

extracted_from_files

URL
detected URL: http://www.dashbay.com/2011/05/internet-explorer-caches-ajax/

XIOC detected URL: http://www.dashbay.com/2011/05/internet-explorer-caches-ajax/

extracted_from_files

URL
detected URL: https://github.com/npm/npm-fullfat-registry

XIOC detected URL: https://github.com/npm/npm-fullfat-registry

extracted_from_files

URL
detected URL: https://github.com/sballesteros/couch-multipart-stream/

XIOC detected URL: https://github.com/sballesteros/couch-multipart-stream/

extracted_from_files

URL
detected URL: http://pouchdb.com/errors.html#no_access_control_allow_origin_header');

XIOC detected URL: http://pouchdb.com/errors.html#no_access_control_allow_origin_header');

extracted_from_files

URL
detected URL: https://bugs.webkit.org/show_bug.cgi?id=137637

XIOC detected URL: https://bugs.webkit.org/show_bug.cgi?id=137637

extracted_from_files

URL
detected URL: https://code.google.com/p/chromium/issues/detail?id=422690

XIOC detected URL: https://code.google.com/p/chromium/issues/detail?id=422690

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/IndexedDB/IDBDatabase#close

XIOC detected URL: https://developer.mozilla.org/en-US/docs/IndexedDB/IDBDatabase#close

extracted_from_files

URL
detected URL: https://github.com/daleharvey/pouchdb/issues/1521

XIOC detected URL: https://github.com/daleharvey/pouchdb/issues/1521

extracted_from_files

URL
detected URL: http://www.broofa.com

XIOC detected URL: http://www.broofa.com

extracted_from_files

URL
detected URL: http://guide.couchdb.org/draft/conflicts.html

XIOC detected URL: http://guide.couchdb.org/draft/conflicts.html

extracted_from_files

URL
detected URL: https://github.com/apache/couchdb/blob/master/src/couchdb/couch_key_tree.erl

XIOC detected URL: https://github.com/apache/couchdb/blob/master/src/couchdb/couch_key_tree.erl

extracted_from_files

URL
detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=901097

XIOC detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=901097

extracted_from_files

URL
detected URL: http://stackoverflow.com/questions/14967647/

XIOC detected URL: http://stackoverflow.com/questions/14967647/

extracted_from_files

URL
detected URL: http://stackoverflow.com/questions/6965107/

XIOC detected URL: http://stackoverflow.com/questions/6965107/

extracted_from_files

URL
detected URL: http://www.myersdaily.org/joseph/javascript/md5-text.html

XIOC detected URL: http://www.myersdaily.org/joseph/javascript/md5-text.html

extracted_from_files

URL
detected URL: https://github.com/montagejs/collections

XIOC detected URL: https://github.com/montagejs/collections

extracted_from_files

URL
detected URL: https://github.com/daleharvey/pouchdb/issues/40

XIOC detected URL: https://github.com/daleharvey/pouchdb/issues/40

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Tools/Web_Console#Styling_messages

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Tools/Web_Console#Styling_messages

extracted_from_files

URL
detected URL: http://stackoverflow.com/a/398120/376773

XIOC detected URL: http://stackoverflow.com/a/398120/376773

extracted_from_files

URL
detected URL: http://stackoverflow.com/a/16459606/376773

XIOC detected URL: http://stackoverflow.com/a/16459606/376773

extracted_from_files

URL
detected URL: https://github.com/apache/couchdb-couch-replicator/blob/master/src/couch_replicator.erl#L863-L906

XIOC detected URL: https://github.com/apache/couchdb-couch-replicator/blob/master/src/couch_replicator.erl#L863-L906

extracted_from_files

URL
detected URL: http://pajhome.org.uk/crypt/md5

XIOC detected URL: http://pajhome.org.uk/crypt/md5

extracted_from_files

URL
detected URL: https://opensource.org/licenses/MIT

XIOC detected URL: https://opensource.org/licenses/MIT

extracted_from_files

URL
detected URL: https://blueimp.net

XIOC detected URL: https://blueimp.net

extracted_from_files

URL
detected URL: https://github.com/blueimp/JavaScript-MD5

XIOC detected URL: https://github.com/blueimp/JavaScript-MD5

extracted_from_files

URL
detected URL: https://github.com/ttaubert/node-arraybuffer-slice

XIOC detected URL: https://github.com/ttaubert/node-arraybuffer-slice

extracted_from_files

URL
detected URL: https://connect.microsoft.com/IE/feedback/details/771452/typed-array-subarray-issue

XIOC detected URL: https://connect.microsoft.com/IE/feedback/details/771452/typed-array-subarray-issue

extracted_from_files

URL
detected URL: http://jsperf.com/md5-shootout/7

XIOC detected URL: http://jsperf.com/md5-shootout/7

extracted_from_files

URL
detected URL: https://github.com/fis-components/lodash.isplainobject/

XIOC detected URL: https://github.com/fis-components/lodash.isplainobject/

extracted_from_files

URL
detected URL: https://github.com/uuidjs/uuid

XIOC detected URL: https://github.com/uuidjs/uuid

extracted_from_files

URL
detected URL: http://docs.python.org/library/uuid.html

XIOC detected URL: http://docs.python.org/library/uuid.html

extracted_from_files

URL
detected URL: https://github.com/LiosK/UUID.js

XIOC detected URL: https://github.com/LiosK/UUID.js

extracted_from_files

URL
detected URL: https://github.com/uuidjs/uuid/pull/434

XIOC detected URL: https://github.com/uuidjs/uuid/pull/434

extracted_from_files

URL
detected URL: http://www.movable-type.co.uk/scripts/sha1.html

XIOC detected URL: http://www.movable-type.co.uk/scripts/sha1.html

extracted_from_files

URL
detected URL: https://github.com/uuidjs/uuid#getrandomvalues-not-supported');

XIOC detected URL: https://github.com/uuidjs/uuid#getrandomvalues-not-supported');

extracted_from_files

URL
detected URL: https://github.com/timdp/es6-promise-pool

XIOC detected URL: https://github.com/timdp/es6-promise-pool

extracted_from_files

URL
detected URL: https://msdn.microsoft.com/en-us/library/hh869301%28v=vs.85%29.aspx

XIOC detected URL: https://msdn.microsoft.com/en-us/library/hh869301%28v=vs.85%29.aspx

extracted_from_files

URL
detected URL: https://code.google.com/p/chromium/issues/detail?id=408120

XIOC detected URL: https://code.google.com/p/chromium/issues/detail?id=408120

extracted_from_files

URL
detected URL: https://github.com/pouchdb/pouchdb/issues/5922

XIOC detected URL: https://github.com/pouchdb/pouchdb/issues/5922

extracted_from_files

URL
detected URL: https://github.com/pouchdb/pouchdb/issues/3267

XIOC detected URL: https://github.com/pouchdb/pouchdb/issues/3267

extracted_from_files

URL
detected URL: https://unpkg.com/[email protected]/scope_eval.js)

XIOC detected URL: https://unpkg.com/[email protected]/scope_eval.js)

extracted_from_files

URL
detected URL: https://github.com/alexdavid/scope-eval

XIOC detected URL: https://github.com/alexdavid/scope-eval

extracted_from_files

Hash
detected SHA1 Hash: 29c358140a74f252aeb08c9eb28bef86f2217d4a

XIOC detected SHA1 Hash: 29c358140a74f252aeb08c9eb28bef86f2217d4a

extracted_from_files

Hash
detected MD5 Hash: 7c3ac256b693c462af8442f992b83696

XIOC detected MD5 Hash: 7c3ac256b693c462af8442f992b83696

extracted_from_files

Hash
detected MD5 Hash: 56649f1b0506c6ca9fda0746eb0cacdf

XIOC detected MD5 Hash: 56649f1b0506c6ca9fda0746eb0cacdf

extracted_from_files

Hash
detected MD5 Hash: 5d41402abc4b2a76b9719d911017c592

XIOC detected MD5 Hash: 5d41402abc4b2a76b9719d911017c592

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

Domain
detected Domain: www.ascendercorp.com

XIOC detected Domain: www.ascendercorp.com

extracted_from_files

URL
detected URL: http://crl.verisign.com/pca3.crl0)

XIOC detected URL: http://crl.verisign.com/pca3.crl0)

extracted_from_files

Domain
detected Domain: fun.map

XIOC detected Domain: fun.map

extracted_from_files

Domain
detected Domain: chrome.storage

XIOC detected Domain: chrome.storage

extracted_from_files

URL
detected URL: https://www.verisign.com/rpa

XIOC detected URL: https://www.verisign.com/rpa

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Tabalanche is a Chrome Web Store extension published by [email protected]. Version 1.2.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 84.75/100 (HIGH risk) based on 393 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • Medium: 342 finding(s)
  • Low: 51 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Tabalanche is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 228 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions