Chrome Web Store

Easy Pomodoro

by [email protected] · 30.0K users · 4.8 rating
f523a33b-40dd-5b6c-afbc-af635df46436 | v1.0.2
54/ 100
MEDIUM risk
Risk verdict
Review before use

Score-based assessment (medium risk, 54/100). No analyst review available.

Analysis record

Analysed
1 months ago
Version
v1.0.2
Artifact
SHA256 ADC…44F
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

37 detail rows

YARA Rule Matches

8 rules
SeverityRuleHitsFilesMetadata
LOWpostinstall persistence mechanism 1
background.iife.js
-
LOWpostinstall crypto operations 3
_metadata/verified_contents.jsonoptions/assets/index-B1oWv1b8.jsnew-tab/assets/index-DiyuFkG_.js
-
LOWpostinstall system command 10
sounds/complete.mp3options/assets/index-B1oWv1b8.jsoptions/sounds/complete.mp3 +7 more
-
LOWpostinstall file manipulation 3
options/assets/index-B1oWv1b8.jsnew-tab/assets/index-DiyuFkG_.jsbackground.iife.js
-
LOWpostinstall obfuscation 5
options/assets/index-B1oWv1b8.jsoptions/logo_horizontal.svgnew-tab/assets/index-DiyuFkG_.js +2 more
-
LOWpostinstall network communication 6
_metadata/verified_contents.jsonoptions/logo_horizontal_dark.svgoptions/logo_horizontal.svg +3 more
-
LOWpostinstall file download 3
options/assets/index-B1oWv1b8.jsnew-tab/assets/index-DiyuFkG_.jsbackground.iife.js
-
LOWNoUseWeakRandom 2
options/assets/index-B1oWv1b8.jsnew-tab/assets/index-DiyuFkG_.js
-

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

35
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
2
Portfolio

12 evidence rows available.

Finding Categories

4
Network
13
IoC Indicators

YARA Rules Matched

8 rules(33 hits)
postinstall persistence mechanism postinstall crypto operations postinstall system command postinstall file manipulation postinstall obfuscation postinstall network communication postinstall file download NoUseWeakRandom

Requested Permissions

4 permissions
storage
Low
notifications
Low
offscreen
Low
search
Low

Security Analysis Summary

Security Analysis Overview

Easy Pomodoro is a Chrome Web Store extension published by [email protected]. Version 1.0.2 has been analyzed by the Risky Plugins security platform, receiving a risk score of 53.54/100 (MEDIUM risk) based on 50 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 17 finding(s)
  • Low: 33 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Easy Pomodoro is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 30K users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

About This Extension

Transform your new tab into a productivity powerhouse with Easy Pomodoro - the elegant time management tool that helps you stay focused while searching with your preferred engine (Yahoo, Google, Microsoft Bing, DuckDuckGo, or Ecosia). ⏰ Key Features: - Beautiful, distraction-free Pomodoro timer right in your new tab - Yahoo-powered search bar for instant web access without disrupting your flow - Customizable work and break intervals to match your workflow - Desktop notifications to keep you on track - Clean, intuitive interface that stays out of your way ⚡ Supercharge Your Productivity: Easy Pomodoro brings the power of the Pomodoro Technique to every new tab. Whether you're studying, working, or tackling personal projects, our timer helps you maintain focus and achieve more. 🎨 Elegant Design: - Minimalist interface that's easy on the eyes - Visual progress indicators - Subtle animations that don't distract - Dark and light themes to match your browser ⚙️ Full Customization: - Set custom work intervals (default: 25 minutes) - Adjust break duration to your preference - Configure notification sounds - Personalize alert messages - Choose from popular search engines including Yahoo, Google, Bing, and more* 🔔 Smart Notifications: - Desktop notifications when intervals end - Optional audio alerts - Gentle visual indicators - Never miss a break or work session Perfect for: Students, professionals, remote workers, and anyone looking to enhance their productivity *Easy Pomodoro respects your browser's search settings through the Chrome Search API. Privacy Policy: https://pomodorosearch.com/privacy.php T&C: https://pomodorosearch.com/terms.php

Frequently Asked Questions