Allows to save photo, image, video from the popular social network. Simply save the content that is in a common access. Quick access to the website to review news feed. Easily open direct messages just with one click. It's a great tool for website lovers who want to stay in touch with friends as well as review the news feed.
Summary:
The "Downloader For Instagram" extension, intended for downloading media from Instagram, is confirmed to exhibit malicious behavior, posing a critical security risk due to its involvement in manipulating search traffic and redirecting users to external sites.
Key insights:
Flags items that exhibit confirmed malicious activity.
Evidence
The extension periodically communicates with a remote command-and-control server to retrieve updated configuration and network rules. It monitors user activity on search engine websites, applies remotely controlled browser network rules, and sends collected search-related information back to the server. This behavior enables manipulation of search traffic and redirection to external websites.
Flags items that have been removed or delisted from the marketplace, potentially due to security vulnerabilities, or malicious behavior. Such extensions pose a risk as they are no longer maintained or patched.
Flags items that declare overly broad host access patterns, enabling interaction with all websites. This level of access can be exploited to inject scripts into trusted sites and increases the risk of sensitive data exposure, cross-site surveillance, and credential harvesting.
AI-powered analysis of the extension's source code for security insights and risk assessment.
API calls detected through static analysis of the source code. For more accurate insights, explore our sandbox dynamic analysis.
Any encoded/decoded secrets we managed to find in the source code, git repository, or related files
Known vulnerabilities and security issues detected in the extension's dependencies and code.
Any identifiers we detected that may indicate external communication from the item's code
Dependencies and third-party libraries used by the extension, including version information and license details.
