Removed from Marketplace
Flags items that have been removed or delisted from the marketplace, potentially due to security vulnerabilities, or malicious behavior. Such extensions pose a risk as they are no longer maintained or patched.
high
Findings
Verified Hardcoded Secret
Flags items contain hardcoded valid secrets. Threat actors can access sensitive data and resources by exploiting hardcoded secrets, eventually compromising the extension.
high
Broad Host Permissions
Flags items that declare overly broad host access patterns, enabling interaction with all websites. This level of access can be exploited to inject scripts into trusted sites and increases the risk of sensitive data exposure, cross-site surveillance, and credential harvesting.
medium
All findings are available for Enterprise users
Code analysis
AI-powered analysis of the extension's source code for security insights and risk assessment.
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
CODE INSIGHTS ARE AVAILABLE FOR ENTERPRISE USERS
Permissions
medium
storage
api
Enables persistent data storage for the extension, potentially storing large amounts of user-related information.
pending
<all_urls>
host
pending
content.css
resource
API Calls
API calls detected through static analysis of the source code. For more accurate insights, explore our sandbox dynamic analysis.
medium
chrome.runtime.connect
chrome
/background.iife.js
medium
chrome.runtime.id
chrome
/background.iife.js
medium
chrome.runtime.onMessage
chrome
/background.iife.js
All API calls are available for Enterprise users
Secrets
Any encoded/decoded secrets we managed to find in the source code, git repository, or related files
Alchemy
/popup/assets/index-eMimbOpq.js
Verified
All secrets are available for Enterprise users
Vulnerabilities
Known vulnerabilities and security issues detected in the extension's dependencies and code.
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
VULNERABILITIES ARE AVAILABLE FOR ENTERPRISE USERS
External communication
Any identifiers we detected that may indicate external communication from the item's code
https://api.phant
background.iife.js
https://api.phantom.app/dapps/v1?$
background.iife.js
https://api.phantom.app/explore/v1/trending-collections?$
background.iife.js
All external communications are available for Enterprise users
Dependencies
Dependencies and third-party libraries used by the extension, including version information and license details.
chart.js
Version:
4.4.8
vue
Version:
3.5.13
All dependencies are available for Enterprise users
Licenses & Compliance
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
LICENSES & COMPLIANCE ARE AVAILABLE FOR ENTERPRISE USERS