Is "Companybook" on Chrome Web Store Safe to Install?

[email protected] · chrome · v0.1

Companybook gir deg umiddelbar tilgang til bedriftsinformasjon når du besøker norske nettsider. ✓ Automatisk gjenkjenning av norske bedrifter ✓ Se selskapsnavn, bransje, antall ansatte og omsetning ✓ Ett klikk til full bedriftsprofil på companybook.co ✓ Fungerer på alle .no-domener Hvordan det fungerer: 1. Besøk en norsk nettside (.no) 2. Se badge-indikatoren på extension-ikonet 3. Klikk for å se bedriftsinformasjon Grønn badge = Bedrift funnet i databasen Gul badge = Ukjent domene (legges til for fremtidig oppslag) Companybook dekker over 1.1 millioner norske bedrifter med data fra Brønnøysundregistrene.

Risk Assessment

Analyzed
84.98
out of 100
HIGH

33 security findings detected across all analyzers

Chrome extension requesting 6 permissions

Severity Breakdown

0
Critical
10
High
23
Medium
0
Low
0
Info

Finding Categories

10
Malware Signatures
2
Network
20
IoC Indicators

YARA Rules Matched

6 rules(10 hits)
postinstall system command postinstall crypto operations postinstall file manipulation postinstall network communication postinstall file download postinstall persistence mechanism

Requested Permissions

6 permissions
tabs
Medium
storage
Low
alarms
Low
webNavigation
Low
https://companybook.co/*
Low
https://eu.i.posthog.com/*
Low

About This Extension

Companybook gir deg umiddelbar tilgang til bedriftsinformasjon når du besøker norske nettsider. ✓ Automatisk gjenkjenning av norske bedrifter ✓ Se selskapsnavn, bransje, antall ansatte og omsetning ✓ Ett klikk til full bedriftsprofil på companybook.co ✓ Fungerer på alle .no-domener Hvordan det fungerer: 1. Besøk en norsk nettside (.no) 2. Se badge-indikatoren på extension-ikonet 3. Klikk for å se bedriftsinformasjon Grønn badge = Bedrift funnet i databasen Gul badge = Ukjent domene (legges til for fremtidig oppslag) Companybook dekker over 1.1 millioner norske bedrifter med data fra Brønnøysundregistrene.

Detailed Findings

13 total

YARA Rule Matches

6 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
5
Domains
15
Strings
20

All Indicators · 20

Domain
detected Domain: e.company

XIOC detected Domain: e.company

extracted_from_files

URL
detected URL: https://eu.i.posthog.com

XIOC detected URL: https://eu.i.posthog.com

extracted_from_files

URL
detected URL: https://companybook.co

XIOC detected URL: https://companybook.co

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://companybook.co/*

XIOC detected URL: https://companybook.co/*

extracted_from_files

URL
detected URL: https://eu.i.posthog.com/*

XIOC detected URL: https://eu.i.posthog.com/*

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: o.domains

XIOC detected Domain: o.domains

extracted_from_files

Domain
detected Domain: r.ceo

XIOC detected Domain: r.ceo

extracted_from_files

Domain
detected Domain: n.properties

XIOC detected Domain: n.properties

extracted_from_files

Domain
detected Domain: n.name

XIOC detected Domain: n.name

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: t.ceo

XIOC detected Domain: t.ceo

extracted_from_files

Domain
detected Domain: t.org

XIOC detected Domain: t.org

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: n.company

XIOC detected Domain: n.company

extracted_from_files

Domain
detected Domain: eu.i.posthog.com

XIOC detected Domain: eu.i.posthog.com

extracted_from_files

Domain
detected Domain: companybook.co

XIOC detected Domain: companybook.co

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Companybook is a Chrome Web Store extension published by [email protected]. Version 0.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 84.98/100 (HIGH risk) based on 33 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 10 finding(s)
  • Medium: 23 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Companybook is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 1 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

KPN Password Manager

[email protected]

CRITICAL

MAGgie - An AI Assistant

[email protected]

CRITICAL 1K users

Aintivirus Privacy and Wallet

[email protected]

CRITICAL 46 users

BugZap — Visual Bug Reporter

[email protected]

CRITICAL

FormGenieAI

[email protected]

CRITICAL

OmniChat

[email protected]

CRITICAL 58 users