Notebook Web Clipper – Sticky Notes & Save Articles

AI Security Review

Evidence context: threat category none; evidence quality strong.

The extension is named “Notebook Web Clipper – Sticky Notes & Save Articles” and has the description “Clear the clutter. Clip the web. Save to Notebook.” The strongest signals are the three high-severity findings titled OBFUSCATION-invisible_unicode_payload, located at _locales/fa/messages.json:0, _locales/te/messages.json:0, and _locales/kn/messages.json:0. Those paths are locale message files for Farsi, Telugu, and Kannada. Invisible Unicode markers in language resources are valid writing-system characters in several South Asian and Middle Eastern scripts, so these titles do not establish hidden executable code.

The network findings are concentrated in bundled files. NET-FETCH-dist/ia-summarize.bundle.js-527, NET-XMLHTTPREQUEST-dist/ia-summarize.bundle.js-3758, and the related NET-FETCH findings in dist/ia-summarize.bundle.js identify ordinary request APIs inside a summarization bundle. The same pattern occurs in dist/image-card.bundle.js, including NET-FETCH-dist/image-card.bundle.js-215 and NET-XMLHTTPREQUEST-dist/image-card.bundle.js-3758, and in dist/image-view.bundle.js:215. Fetch and XMLHttpRequest calls fit an extension that clips articles, creates image cards, and summarizes saved content. The available endpoint list includes malformed-looking strings such as action.download, buttonpane.show, and classes.today, alongside recognizable sites such as allrecipes.com and aktualne.cz. Those strings lack the form of a clear command-and-control or credential-targeting domain, and the supplied network findings do not identify data sent to a login, banking, or payment service.

The scanner also reports no malware-signature match, no tool-poisoning match, and no secret finding. The absence of a developer name is a real trust gap, yet _locales/fa/messages.json:0, _locales/te/messages.json:0, and _locales/kn/messages.json:0 provide a direct explanation for every high-severity result. The dist/ paths provide a direct explanation for the repeated network detections. The extension declares no permissions or host permissions in the supplied metadata, which limits the browser access shown here.

A skeptic could point to the blank developer field, the unknown endpoint strings, and the high severity assigned to OBFUSCATION-invisible_unicode_payload. Those points justify keeping the publisher identity unresolved. They do not outweigh the file context: the obfuscation titles occur only in script-specific locale files, while the request titles occur in feature bundles named ia-summarize, image-card, and image-view. No finding title names cookie access, history manipulation, search replacement, credential collection, proxy routing, or malware delivery. A clean runtime trace or publisher verification would add assurance, but the supplied static evidence supports scanner noise rather than intentional harm.

Key Reasons

• OBFUSCATION-invisible_unicode_payload occurs only in locale files for Farsi, Telugu, and Kannada.
• Network findings are located in feature bundles named ia-summarize, image-card, and image-view.
• No malware-signature, credential-theft, browser-hijacking, or tool-poisoning finding is present.
• The listed endpoint strings do not identify a clear command-and-control or credential-targeting domain.

False Positive Considerations

• Invisible Unicode detection in _locales/fa/messages.json, _locales/te/messages.json, and _locales/kn/messages.json.
• Bundled network API detections in dist/ia-summarize.bundle.js, dist/image-card.bundle.js, and dist/image-view.bundle.js.
• Malformed-looking endpoint strings such as action.download and buttonpane.show produced by IoC extraction.
• Code-smell and IoC volume from bundled JavaScript.

Reviewed 2026-09-29; recommended action: suppress false positive; model confidence 91%.