Tracked campaign: SearchJack second wave

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by malext.io

Chrome Web Store

Recipe Searches

by [email protected] · 788 users
e3c3dff4-0cff-5079-8593-08bc63f652bb | v1.0.4
40/ 100
LOW risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
3 months ago
Version
v1.0.4
Artifact
SHA256 470…A9B
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

1 detail row

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

21 total

Loading network indicators

IoC detail rows are loaded outside the initial page render.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

24
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
1
Portfolio

13 evidence rows available.

Finding Categories

1
Network
21
IoC Indicators

Requested Permissions

1 permission
search
Low

Security Analysis Summary

Security Analysis Overview

Recipe Searches is a Chrome Web Store extension published by [email protected]. Version 1.0.4 has been analyzed by the Risky Plugins security platform, receiving a risk score of 39.63/100 (LOW risk) based on 22 security findings.

Risk Assessment

This extension presents low security risk. Some minor findings were detected, but nothing that would prevent typical usage. Reviewing the detailed findings below is recommended before use in sensitive environments.

Findings Breakdown

  • Medium: 22 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Recipe Searches is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 788 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

About This Extension

Install our extension to set RecipeSearches (powered by yahoo) as your default search engine and customize your new tab, giving you instant access to thousands of recipes with every search. With this extension, you can easily configure RecipeSearches as your go-to search engine and personalize your browser's new tab, making it easier to discover and save your favorite recipes. By clicking "Add to Chrome," you consent to installing the RecipeSearches extension to change your default search engine to RecipeSearches (powered by Yahoo Search). By installing, you agree to our Terms of Use and Privacy Policy. You can use the extension icon to search for recipes or also type RecipeSearches and hit tab to search of recipes on the address bar of the browser Get RecipeSearches to explore delicious recipes and inspire your culinary adventures daily. Like other search engines, we generate revenue from advertisements, but we focus on bringing you the best recipe content. Please feel free to reach out anytime: [email protected]

Frequently Asked Questions