Is "Free better Weather" on Chrome Web Store Safe to Install?

[email protected] · chrome · v3.3.0

Weather data directly in your browser toolbar. Features: - Live temperature as colored badge in toolbar icon - 15 different weather symbols (sun, clouds, rain, snow, thunderstorm, ...) - City search: just type a city name -- worldwide, no station ID needed - Save multiple locations and switch quickly - Temperature in Celsius or Fahrenheit - Configurable update interval (5-60 minutes) - Smart caching: minimal API requests - Dark mode and light mode (automatic) - 20 languages Data source: Open weather data via Open-Meteo API. Free, no registration, no API key required. Available worldwide. Privacy: All data is stored locally in Chrome. No tracking, no analytics, no data sent to developer. Fully open source.

Risk Assessment

Analyzed
100
out of 100
CRITICAL

105 security findings detected across all analyzers

Chrome extension requesting 4 permissions

Severity Breakdown

0
Critical
59
High
46
Medium
0
Low
0
Info

Finding Categories

59
Malware Signatures
2
Network
44
IoC Indicators

YARA Rules Matched

6 rules(59 hits)
postinstall file manipulation postinstall crypto operations postinstall network communication postinstall system command postinstall file download postinstall persistence mechanism

Requested Permissions

4 permissions
storage
Low
alarms
Low
https://api.open-meteo.com/*
Low
https://nominatim.openstreetmap.org/*
Low

About This Extension

Weather data directly in your browser toolbar. Features: - Live temperature as colored badge in toolbar icon - 15 different weather symbols (sun, clouds, rain, snow, thunderstorm, ...) - City search: just type a city name -- worldwide, no station ID needed - Save multiple locations and switch quickly - Temperature in Celsius or Fahrenheit - Configurable update interval (5-60 minutes) - Smart caching: minimal API requests - Dark mode and light mode (automatic) - 20 languages Data source: Open weather data via Open-Meteo API. Free, no registration, no API key required. Available worldwide. Privacy: All data is stored locally in Chrome. No tracking, no analytics, no data sent to developer. Fully open source.

Detailed Findings

61 total

YARA Rule Matches

6 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
9
IP Addresses
4
Domains
31
Strings
44

All Indicators · 44

URL
detected URL: https://api.open-meteo.com/*

XIOC detected URL: https://api.open-meteo.com/*

extracted_from_files

IP
detected IP: 1.23.82.72

XIOC detected IP: 1.23.82.72

extracted_from_files

URL
detected URL: https://ko-fi.com/HalloWelt42',

XIOC detected URL: https://ko-fi.com/HalloWelt42',

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

URL
detected URL: http://www.w3.org/1999/xlink

XIOC detected URL: http://www.w3.org/1999/xlink

extracted_from_files

Domain
detected Domain: loc.name

XIOC detected Domain: loc.name

extracted_from_files

Domain
detected Domain: result.name

XIOC detected Domain: result.name

extracted_from_files

Domain
detected Domain: result.lat

XIOC detected Domain: result.lat

extracted_from_files

Domain
detected Domain: result.country

XIOC detected Domain: result.country

extracted_from_files

Domain
detected Domain: colors.cloud

XIOC detected Domain: colors.cloud

extracted_from_files

Domain
detected Domain: ctx.save

XIOC detected Domain: ctx.save

extracted_from_files

Domain
detected Domain: loc.lat

XIOC detected Domain: loc.lat

extracted_from_files

Domain
detected Domain: k.cu

XIOC detected Domain: k.cu

extracted_from_files

Domain
detected Domain: u.re

XIOC detected Domain: u.re

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

Domain
detected Domain: ko-fi.com

XIOC detected Domain: ko-fi.com

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: resp.weather

XIOC detected Domain: resp.weather

extracted_from_files

Domain
detected Domain: c.cloud

XIOC detected Domain: c.cloud

extracted_from_files

Domain
detected Domain: results.map

XIOC detected Domain: results.map

extracted_from_files

Domain
detected Domain: item.lat

XIOC detected Domain: item.lat

extracted_from_files

Domain
detected Domain: data.settings.locations.map

XIOC detected Domain: data.settings.locations.map

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: r.tf

XIOC detected Domain: r.tf

extracted_from_files

Domain
detected Domain: hw.mo

XIOC detected Domain: hw.mo

extracted_from_files

Domain
detected Domain: と都市ジオコーディング用のnominatim.openstreetmap.org

XIOC detected Domain: と都市ジオコーディング用のnominatim.openstreetmap.org

extracted_from_files

Domain
detected Domain: alarm.name

XIOC detected Domain: alarm.name

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: cached.weather

XIOC detected Domain: cached.weather

extracted_from_files

Domain
detected Domain: 8.bw

XIOC detected Domain: 8.bw

extracted_from_files

Domain
detected Domain: c.weather

XIOC detected Domain: c.weather

extracted_from_files

Domain
detected Domain: c.is

XIOC detected Domain: c.is

extracted_from_files

IP
detected IP: ::4

XIOC detected IP: ::4

extracted_from_files

URL
detected URL: https://nominatim.openstreetmap.org/*

XIOC detected URL: https://nominatim.openstreetmap.org/*

extracted_from_files

IP
detected IP: 2.2.82.64

XIOC detected IP: 2.2.82.64

extracted_from_files

Domain
detected Domain: api.open-meteo.com

XIOC detected Domain: api.open-meteo.com

extracted_from_files

Domain
detected Domain: وnominatim.openstreetmap.org

XIOC detected Domain: وnominatim.openstreetmap.org

extracted_from_files

Domain
detected Domain: nominatim.openstreetmap.org

XIOC detected Domain: nominatim.openstreetmap.org

extracted_from_files

Domain
detected Domain: 天気データ用のapi.open-meteo.com

XIOC detected Domain: 天気データ用のapi.open-meteo.com

extracted_from_files

URL
detected URL: https://nominatim.openstreetmap.org';

XIOC detected URL: https://nominatim.openstreetmap.org';

extracted_from_files

URL
detected URL: https://github.com/HalloWelt42/claude-limit-chrome-addon'

XIOC detected URL: https://github.com/HalloWelt42/claude-limit-chrome-addon'

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

URL
detected URL: https://api.open-meteo.com/v1/forecast';

XIOC detected URL: https://api.open-meteo.com/v1/forecast';

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Free better Weather is a Chrome Web Store extension published by [email protected]. Version 3.3.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 105 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 59 finding(s)
  • Medium: 46 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Free better Weather is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 2 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions