Apk Downloader
🔍 Security Report Available View on Chrome Web StoreChrome will indicate if you already have this installed.
Lets you download Android apps and games directly from the Google Play Store without needing to install APK files on your device, making it a convenient option for anyone looking to access their favorite mobile content in Chrome. Suitable for users who want to enjoy Android apps and games on their computer without the need for additional setup. Benefits most those who frequently browse the Google Play Store or have trouble accessing certain titles due to compatibility issues.
Overview
APKPure Free Online APK Downloader provides you with the fastest search and download of free apps and games from Google Play Store. Just enter the app name or the package name to find and download the apps you want.
Unlock Region Limit
APKPure Online APK Downloader lets you download any region-restrict apps and games (For Free Only) on Android devices directly wherever you are. All you need to do is to search for the apps you want and click on the download button.
No Login Required
APKPure doesn't require login account to let you download apps and games on Android devices safe and fast. APKPure Online APK Downloader saves your time and protect your privacy by allowing users to download apps and games to Android without registration.
Safe Download
APKPure APK Downloader is 100% safe. APKPure APK Downloader provides you with original XAPK / APK files from Google Play Store (Free Apps Only) without modification in any way. All APKPure.com apps are verified prior to publishing to protect your safety.
How to use APKPure Free Online APK Downloader?
Enter the app name or the package name in the search bar, and you will be redirected to the app info page and be able to download the app or game you want directly to your mobile device.
Tags
Privacy Practices
Security Analysis — Apk Downloader
Permissions
Code Patterns Detected
External Connections
Package Contents 39 files · 438KB
What This Extension Does
The Apk Downloader extension allows users to download Android apps and games from Google Play Store without requiring a login account. It provides a safe and fast way to access region-restricted content, but its broad permissions raise some concerns.
Permissions Explained
- tabsexpected: This permission lets the extension access your browsing history and current tabs.
Technical: The extension can read and modify your browser's tab state using thechrome.tabsAPI, which could potentially allow it to intercept sensitive information or inject malicious content into open tabs. - storageexpected: This permission allows the extension to store data locally on your device.
Technical: The extension can read and write data to your browser's storage using thechrome.storageAPI, which could potentially allow it to store sensitive information or inject malicious scripts into web pages. - contextMenusexpected: This permission lets the extension create custom context menu items in your browser.
Technical: The extension can create and manage custom context menu items using thechrome.contextMenusAPI, which could potentially allow it to inject malicious content into web pages or intercept sensitive information. - activeTabexpected: This permission allows the extension to access your currently active tab's content and metadata.
Technical: The extension can read and modify your browser's active tab state using thechrome.tabsAPI, which could potentially allow it to intercept sensitive information or inject malicious content into open tabs. - https://*/*check this: This permission lets the extension access all HTTPS websites and their content.
Technical: The extension has broad host permissions, allowing it to access any website's content using thechrome.tabsAPI. This could potentially allow it to intercept sensitive information or inject malicious scripts into web pages. ⚠ 1
Your Data
The extension accesses your browsing history, current tabs, and storage data locally on your device. It also sends data to various domains, including tapi.pureapk.com and play.google.com. The exact nature of the data being sent is unclear.
Technical Details
www.w3.org, schema.org, reactjs.org, tapi.pureapk.com, play.google.com, www.facebook.com, and twitter.com. It uses the Fetch API to send requests, but encryption status is unclear. The data types being sent are likely cookies, tokens, or page content.Code Findings
The extension uses innerHTML assignments in its code, which could potentially allow an attacker to inject malicious scripts into web pages.
Technical: The extension's code contains the following pattern: <div id='x' innerHTML='<script>alert(1)</script>'></div>. This is a potential XSS vector that could be exploited by an attacker.
💡 innerHTML assignments are commonly used in legitimate extensions to inject dynamic content into web pages.
The extension uses String.fromCharCode and other obfuscation techniques in its code, which could potentially make it harder to analyze or debug.
Technical: The extension's code contains the following pattern: var x = String.fromCharCode(72);. This is an example of obfuscation that could be used to conceal malicious intent.
💡 Obfuscation techniques are commonly used in legitimate extensions to protect intellectual property or prevent reverse engineering.
The extension runs on all websites, which could potentially allow it to intercept sensitive information or inject malicious scripts into web pages.
Technical: The extension's code contains the following pattern: chrome.tabs.onUpdated.addListener(function(tabId, changeInfo, tab) { ... });. This indicates that the extension is listening for updates to all tabs on all websites.
💡 Extensions often need to run on multiple websites to provide their functionality. However, this could potentially allow an attacker to inject malicious scripts into web pages.
The extension has broad host permissions, allowing it to access any website's content using the chrome.tabs API. This could potentially allow it to intercept sensitive information or inject malicious scripts into web pages.
Technical: The extension's code contains the following pattern: chrome.tabs.onUpdated.addListener(function(tabId, changeInfo, tab) { ... });. This indicates that the extension has broad host permissions, allowing it to access any website's content using the chrome.tabs API.
💡 Extensions often need to access multiple websites to provide their functionality. However, this could potentially allow an attacker to inject malicious scripts into web pages.
The Apk Downloader extension has some concerning permissions and code patterns that raise the risk of data exposure or malicious activity. While it provides a useful functionality for downloading Android apps, users should exercise caution when installing this extension and regularly review its behavior to ensure it is not misbehaving.
