Timestamps for YouTube
Unknown developer · 8 users at risk
Threat Summary
Key Security Threats
YARA rule match: -postinstall_network_communication
/tmp/extract-ae8cf789fc9b4fbb1c943c68ca5cfc2c53638caa008896df427d432f823bdf92-1257384981/background.js
YARA rule match: -postinstall_system_command
/tmp/extract-ae8cf789fc9b4fbb1c943c68ca5cfc2c53638caa008896df427d432f823bdf92-1257384981/background.js
YARA rule match: -postinstall_persistence_mechanism
/tmp/extract-ae8cf789fc9b4fbb1c943c68ca5cfc2c53638caa008896df427d432f823bdf92-1257384981/background.js
YARA rule match: -postinstall_obfuscation
/tmp/extract-ae8cf789fc9b4fbb1c943c68ca5cfc2c53638caa008896df427d432f823bdf92-1257384981/content-scripts/content.js
YARA rule match: -postinstall_file_manipulation
/tmp/extract-ae8cf789fc9b4fbb1c943c68ca5cfc2c53638caa008896df427d432f823bdf92-1257384981/content-scripts/content.js
All Findings (121)
View all 121 security findings
YARA rule match: -postinstall_network_communication
YARA rule match: -postinstall_system_command
YARA rule match: -postinstall_persistence_mechanism
YARA rule match: -postinstall_obfuscation
YARA rule match: -postinstall_file_manipulation
YARA rule match: -postinstall_network_communication
YARA rule match: -postinstall_file_download
YARA rule match: -postinstall_persistence_mechanism
YARA rule match: -NoUseWeakRandom
YARA rule match: -postinstall_crypto_operations
YARA rule match: -postinstall_file_manipulation
YARA rule match: -postinstall_obfuscation
YARA rule match: -postinstall_file_manipulation
YARA rule match: -postinstall_network_communication
YARA rule match: -postinstall_system_command
YARA rule match: -postinstall_crypto_operations
YARA rule match: -postinstall_obfuscation
YARA rule match: -postinstall_file_manipulation
YARA rule match: -postinstall_network_communication
YARA rule match: -postinstall_file_download
Obfuscation pattern 'unicode_heavy' detected.
YARA rule match: -postinstall_file_manipulation
YARA rule match: -postinstall_system_command
Network call of type 'fetch' detected.
Network call of type 'fetch' detected.
XIOC detected Domain: d.next
Network call of type 'fetch' detected.
XIOC detected URL: https://www.patreon.com/cw/weaving
XIOC detected MD5 Hash: 1a4d24e291848323b644bdeab69f030e
XIOC detected URL: https://svelte.dev/e/state_unsafe_mutation
XIOC detected URL: https://svelte.dev/e/svelte_boundary_reset_onerror
XIOC detected URL: https://svelte.dev/e/hydration_mismatch
XIOC detected URL: https://svelte.dev/e/select_multiple_invalid_value
XIOC detected URL: https://svelte.dev/e/svelte_boundary_reset_noop
XIOC detected URL: https://www.patreon.com/cw/weaving
XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Element/attachShadow#elements_you_can_attach_a_shadow_to
XIOC detected URL: https://svelte.dev/e/effect_in_teardown
XIOC detected URL: https://svelte.dev/e/effect_in_unowned_derived
XIOC detected URL: https://svelte.dev/e/effect_orphan
XIOC detected URL: https://svelte.dev/e/effect_update_depth_exceeded
XIOC detected URL: https://svelte.dev/e/props_invalid_value
XIOC detected URL: https://svelte.dev/e/state_descriptors_fixed
XIOC detected URL: https://svelte.dev/e/state_prototype_fixed
XIOC detected Domain: n.timestamps.map
XIOC detected Domain: e.name
XIOC detected Domain: this.locationwatcher.run
XIOC detected URL: http://addons.mozilla.org/ca/crl.pem0N
XIOC detected URL: https://svelte.dev/e/lifecycle_outside_component
XIOC detected URL: https://svelte.dev/e/async_derived_orphan
XIOC detected Domain: i.is
XIOC detected Domain: g.prev.next
XIOC detected Domain: g.next
XIOC detected Domain: x.next
XIOC detected Domain: c.next
XIOC detected Domain: this.name
XIOC detected Domain: e.id
XIOC detected Domain: www.youtube.com
XIOC detected Domain: un.call
XIOC detected Domain: wn.call
XIOC detected Domain: ve.call
XIOC detected Domain: li.call
XIOC detected Domain: a.host
XIOC detected Domain: h.call
XIOC detected Domain: u.next
XIOC detected Domain: developer.mozilla.org
XIOC detected Domain: youtu.be
XIOC detected Domain: a.call
XIOC detected Domain: object.prototype.tostring.call
XIOC detected Domain: t.style.top
XIOC detected Domain: ye.call
XIOC detected Domain: m.set.call
XIOC detected Domain: d.data
XIOC detected Domain: signingca1.addons.mozilla.org
XIOC detected Domain: prev.next
XIOC detected Domain: ee.next
XIOC detected Domain: l.next
XIOC detected Domain: n.style
XIOC detected Domain: t.name
XIOC detected Domain: e.is
XIOC detected Domain: i.next
XIOC detected Domain: e.in
XIOC detected Domain: br.call
XIOC detected Domain: e.target
XIOC detected Domain: o.host
XIOC detected Domain: g.call
XIOC detected Domain: h.set.call
XIOC detected Domain: object.is
XIOC detected Domain: qt.call
XIOC detected Domain: t.call
XIOC detected Domain: n.ac
XIOC detected Domain: e.next
XIOC detected Domain: e.ac
XIOC detected Domain: t.map
XIOC detected Domain: a.map
XIOC detected Domain: n.map
XIOC detected Domain: t.is
XIOC detected Domain: r.b.is
XIOC detected Domain: t.ac
XIOC detected URL: https://svelte.dev/e/each_key_duplicate
XIOC detected Domain: n.is
XIOC detected Domain: n.id
XIOC detected Domain: r.ac
XIOC detected Domain: n.call
XIOC detected Domain: n.next
XIOC detected Domain: t.next
XIOC detected Domain: this.parent.is
XIOC detected Domain: www.patreon.com
XIOC detected Domain: n.data
XIOC detected Domain: e.data
XIOC detected Domain: this.is
XIOC detected Domain: r.next
XIOC detected Domain: c.id
XIOC detected Domain: this.id
XIOC detected Domain: mozilla.com
XIOC detected Domain: content-signature.mozilla.org
XIOC detected Domain: teef80b59cfd089160d7cb58645908591.1a4d24e291848323b644bdeab69f030e.addons.mozilla.org
XIOC detected Domain: globalthis.chrome
XIOC detected Domain: t.id
XIOC detected Domain: n.tab.id
XIOC detected Domain: svelte.dev
XIOC detected URL: https://youtu.be/$
Recommended Action
This extension has significant security concerns that warrant careful review. Consider uninstalling or finding a safer alternative. If you must use it, limit the permissions and monitor for suspicious activity.