Dark Mode
🔍 Security Report Available View on Chrome Web StoreChrome will indicate if you already have this installed.
Overview
Dark Mode is an extension that helps you quickly turn the screen (browser) to dark at night time.
Toolbar button serves as an ON|OFF switch which enables you to easily and quickly turn the extension ON or OFF. If you do not like the current dark theme, please visit the options page and choose a different theme from over 50 available options.
There is also a white-list feature which enables you to exclude a desired domain from dark mode. Simply add a domain(s) to the designated area (comma separated) in the options page and the websites will be excluded from night mode. Alternatively, you can use the context-menu item in mouse right-click to exclude desired websites.
To report bugs, please fill out the bug report form on the add-on's homepage (https://mybrowseraddon.com/dark-mode.html).
Tags
Privacy Practices
Security Analysis — Dark Mode
Permissions
Code Patterns Detected
External Connections
Package Contents 115 files · 965KB
What This Extension Does
Dark Mode is a browser extension that enables users to quickly switch their browser theme to dark mode, with over 50 available themes. It also includes features such as whitelisting specific domains and context menu items for easy exclusion. This extension is suitable for users who want to reduce eye strain while browsing at night.
Permissions Explained
- <all_urls>check this: This permission allows the extension to access all websites, including those that may not be secure or trustworthy.
Technical: The <all_urls> permission grants the extension access to all URLs visited by the user, which can lead to potential data exposure and unauthorized actions. This is a critical risk as it enables the extension to intercept sensitive information such as login credentials, credit card numbers, and personal identifiable information (PII). ⚠ 1 - storageexpected: This permission allows the extension to store data locally on your device.
Technical: The storage permission grants the extension access to read and write browser storage, which can be used to store sensitive information such as login credentials, tokens, or other PII. This is a medium risk as it enables the extension to potentially steal user credentials or inject malicious scripts into websites. - contextMenusexpected: This permission allows the extension to create custom context menu items.
Technical: The contextMenus permission grants the extension access to create and manage context menu items, which can be used for legitimate purposes such as providing additional functionality or for malicious activities such as injecting malware. - alarmsexpected: This permission allows the extension to schedule background tasks.
Technical: The alarms permission grants the extension access to schedule and manage background tasks, which can be used for legitimate purposes such as updating the extension or for malicious activities such as injecting malware or tracking user behavior.
Your Data
The Dark Mode extension accesses browser storage and sends data to various domains, including mybrowseraddon.com, webbrowsertools.com, and stackoverflow.com. It also captures keystrokes and monitors storage changes.
Technical Details
Code Findings
This behavior can be used for malicious activities such as injecting malware or tracking user behavior.
Technical: The extension loads external scripts in its service worker using the Fetch API, which can lead to potential data exposure and unauthorized actions. This is a high risk as it enables the extension to inject malicious scripts into websites or steal sensitive information.
💡 Legitimate extensions may load external scripts for legitimate purposes such as updating the extension or providing additional functionality.
This behavior can be used to steal sensitive information such as login credentials, credit card numbers, and personal identifiable information (PII).
Technical: The extension captures keystrokes using a script element, which can lead to potential data exposure and unauthorized actions. This is a critical risk as it enables the extension to steal user credentials or inject malicious scripts into websites.
💡 Legitimate extensions may capture keystrokes for legitimate purposes such as providing keyboard shortcuts or auto-completion functionality.
This behavior can be used to track user behavior and steal sensitive information.
Technical: The extension monitors storage changes using event listeners, which can lead to potential data exposure and unauthorized actions. This is a medium risk as it enables the extension to potentially steal user credentials or inject malicious scripts into websites.
💡 Legitimate extensions may monitor storage changes for legitimate purposes such as updating the extension or providing additional functionality.
The Dark Mode extension has several security concerns, including excessive permissions and potential data exposure. While it provides a useful feature for users, its behavior raises significant risks that should be addressed by the developer. Users are advised to exercise caution when installing this extension and regularly review their browser settings to ensure they are not compromised.
