Is Wingman Clock safe to use?

Wingman Clock has a security risk score of 64.99/100 (MEDIUM risk). Our security analysis detected 111 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Wingman Clock?

Based on our automated security analysis, Wingman Clock presents medium risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Chrome Web Store Verified

Wingman Clock

by [email protected] · 20.0K users · 3.9 rating

e1940a7b-4dbe-512d-896e-2287955d4794 | v1.0.3

MEDIUM risk

Risk verdict

Review before use

Score-based assessment (medium risk, 65/100). No analyst review available.

Analysis record

Analysed: 1 months ago
Version: v1.0.3
Artifact: SHA256 0DF…34C
Source: Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

30 detail rows

YARA Rule Matches

11 rules

Severity	Rule	Hits	Files	Metadata
LOW	`postinstall file download`	4	background.b78a8f7f.jsprimeicons.dceab5dc.svgnewtab.cf046328.js +1 more	-
LOW	`NoUseWeakRandom`	1	newtab.cf046328.js	-
LOW	`postinstall crypto operations`	4	primeicons.dceab5dc.svgnewtab.cf046328.js_metadata/verified_contents.json +1 more	-
LOW	`postinstall file manipulation`	3	primeicons.dceab5dc.svgnewtab.cf046328.jsnewtab.232de332.css	-
LOW	`postinstall obfuscation`	1	newtab.cf046328.js	-
LOW	`postinstall network communication`	4	background.b78a8f7f.jsprimeicons.dceab5dc.svgnewtab.cf046328.js +1 more	-
LOW	`postinstall system command`	2	newtab.cf046328.jsnewtab.232de332.css	-
LOW	`LocalStorageShouldNotBeUsed`	1	newtab.cf046328.js	-
LOW	`DebuggerStatementsShouldNotBeUsed`	1	newtab.cf046328.js	-
LOW	`RedirectToUnknownPath`	1	newtab.cf046328.js	-
LOW	`postinstall persistence mechanism`	1	newtab.cf046328.js	-

Show network indicators (81)

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

Noisy-finding weight

x1.00

Publisher domain

searchologic.com

Observed

Store verification signal

Limited signal

Limited

Extension portfolio

Portfolio

11 evidence rows available.

Finding Categories

Obfuscation

Network

IoC Indicators

YARA Rules Matched

11 rules(23 hits)

postinstall file download NoUseWeakRandom postinstall crypto operations postinstall file manipulation postinstall obfuscation postinstall network communication postinstall system command LocalStorageShouldNotBeUsed DebuggerStatementsShouldNotBeUsed RedirectToUnknownPath postinstall persistence mechanism

Requested Permissions

2 permissions

storage

Low

*://*.wingmanclock.com/*

Low

Security Analysis Summary

Security Analysis Overview

Wingman Clock is a Chrome Web Store extension published by [email protected]. Version 1.0.3 has been analyzed by the Risky Plugins security platform, receiving a risk score of 64.99/100 (MEDIUM risk) based on 111 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

High: 1 finding(s)
Medium: 87 finding(s)
Low: 23 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Wingman Clock is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 20K users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

About This Extension

Introducing the WingMan-Clock Extension for Chrome! This user-friendly extension allows you to easily add and customize multiple clocks to your browser, so you can keep track of the time in various cities around the world. Simply select the cities you want to monitor and view their current time at a glance on your new tab. The extension also conveniently displays the time differences between the selected cities, making it easy to schedule meetings and stay organized across time zones. With its sleek design and practical functionality, the WingMan-Clock Extension is a must-have tool for anyone who works with colleagues or friends across different regions. By clicking “Add to Chrome”, I accept and agree to install the WingMan-Clock Extension, to set the Chrome™ New Tab search to Yahoo, and to our Terms of Use - https://searchologic.com/Terms-Conditions/, and Privacy Policy -https://searchologic.com/Privacy-Policy/. You may uninstall the extension at any time. To remove our extension from Google Chrome: 1) Click on the three vertical dots icon in the upper right-hand corner of your Chrome browser. 2) Go to "Settings.” 3) In the left menu that appears, click on "Extensions.” 4) From the list of installed Extensions, locate the extension you would like to uninstall.

Wingman Clock

Analysis record

Evidence ledger

OBFUSCATION-UNICODE_HEAVY-newtab.cf046328.js-269094

NET-FETCH-newtab.cf046328.js-3662

NET-FETCH-newtab.cf046328.js-1230

NET-FETCH-newtab.cf046328.js-1159

NET-FETCH-newtab.cf046328.js-3663

OBFUSCATION-EXCESSIVE_PRIVATE_USE_AREA-newtab.232de332.css-0

NET-FETCH-background.b78a8f7f.js-154