Chrome Web Store

SS Ext

by [email protected] · 4 users
fc787c6d-ec0b-56d8-8133-a554a30a4986 | v0.21
73/ 100
HIGH risk
No change since v0.20
Risk verdict
Review before use

Score-based assessment (high risk, 73/100). No analyst review available.

Analysis record

Analysed
1 weeks ago
Version
v0.21
Artifact
SHA256 9FD…C7B
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

5 detail rows

YARA Rule Matches

1 rule
SeverityRuleHitsFilesMetadata
HIGHsupply chain sourcemap appended iife 1
lib/ace/src-noconflict/worker-coffee.js
-

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

29
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
3
Portfolio

12 evidence rows available.

Finding Categories

1
Malware Signatures
4
Network

YARA Rules Matched

1 rule
supply chain sourcemap appended iife

Requested Permissions

5 permissions
cookies

Read and modify cookies on all sites

High
activeTab
Medium
scripting
Low
storage
Low
*://*/SASStudio/*
Low

Security Analysis Summary

Security Analysis Overview

SS Ext is a Chrome Web Store extension published by [email protected]. Version 0.21 has been analyzed by the Risky Plugins security platform, receiving a risk score of 72.96/100 (HIGH risk) based on 5 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • High: 1 finding(s)
  • Medium: 4 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

SS Ext is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 4 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Chrome version history

Risk trend by version

6 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected
73
Change since first
+29
Change from previous
No change
Versions:
First analyzed version
0.10
Aug 7, 2026
Risk range
44 to 73
Across analyzed versions
Latest analyzed version
0.21
Sep 13, 2026
Selected version
high
Version
v0.21
1 weeks ago
Risk score
73
Findings
5
Change vs previous
No change

Pick any point on the chart to explore that version's code below.

About This Extension

A browser extension that adds many tools and UX fixes for SAS Studio 3.8. ## Usage 1. Open SAS Studio and let it fully load 2. Click the extension icon to open the popup, then "Toggle Ace editor" (or press **Ctrl+Period** directly) to toggle Ace on 3. Click again (or Ctrl+Period again) to toggle back to the original editor 4. Use the popup's "Command palette…" button (**Alt+Shift+P**, or bind the `command_palette` command in options page) for quick actions (reload file, focus tree, close tab, ...) and, when an Ace editor is focused, that editor's own commands 5. Use the options page (link in the popup, or right-click the icon → Options) to turn UX patches on/off, rebind hotkeys, or edit custom SAS snippets ## Ace editor configuration `chrome.storage.local.aceConfig` (`{ darkTheme, lightTheme, options: { ... }, vimrc }`, default in `defaults.js`'s `DEFAULT_ACE_CONFIG`) is the single source of truth for every Ace editor's defaults — the SAS Studio code editor, the text-viewer overlay, and the options page's snippet editor. Theme is the one exception: it's always a `darkTheme`/`lightTheme` pair chosen from the options page (auto-switched by OS `prefers-color-scheme`, matching the existing behavior) — the panel's single "theme" option can't express a pair, so a theme change made there is deliberately not persisted. ### Ace vim keybinding config `aceConfig.vimrc` is a small subset of vim config, applied to the shared `ace/keyboard/vim` module (only takes effect once Vim is the active keyboard handler): one mapping per line, `"` starts a comment, blank lines are skipped. Supported: `map`/`nmap`/`imap`/`vmap <lhs> <rhs>`, the `noremap` variants (non-recursive), and `unmap`/`nunmap`/`iunmap`/`vunmap <lhs>`. Anything else is skipped with a console warning. Removing a line doesn't undo that mapping until the page is reloaded.

Frequently Asked Questions