thegreatsuspender icon indicating copy to clipboard operation
thegreatsuspender copied to clipboard

Chrome extension denying crx file - not listed in Chrome web store

Open AN1199 opened this issue 4 years ago • 6 comments

Screen Shot 2021-02-09 at 10 26 02 AM

  • 7.1.11
  • Chrome 88.0.4324.146
  • OSX 10.15.6

AN1199 avatar Feb 09 '21 15:02 AN1199

Malware developers bought the extension from the author. Damage is done

alex-morgun avatar Feb 09 '21 23:02 alex-morgun

Has anyone done a source code audit on github?

DmitriyPekar avatar Feb 10 '21 19:02 DmitriyPekar

Source code is likely not to include the malicious elements of the program. See https://github.com/greatsuspender/thegreatsuspender/issues/1263#issuecomment-721825463

The new owner of the extension has made changes to the code, and pushed an update to the Chrome Web Store, bringing the version up to 7.18. However, they have NOT published the code changes to GitHub, and the latest release here is 7.16:

OP, this extension, including v7.1.11, contains malware. Uninstall it and use an alternative such as The Marvellous Suspender or The Great Discarder. See https://github.com/greatsuspender/thegreatsuspender/issues/1263 for more info.

aidswidjaja avatar Feb 11 '21 11:02 aidswidjaja

Can someone post the last crx, malware free? Or will it be forked? It appears that someone has uploaded a malware free version:

https://chrome.google.com/webstore/detail/the-great-suspender/jaekigmcljkkalnicnjoafgfjoefkpeg/related

justingoldberg avatar Feb 16 '21 05:02 justingoldberg

I think the Marvellou Suspender (https://chrome.google.com/webstore/detail/the-marvellous-suspender/noogafoofpebimajpfpamcfhoaifemoa?hl=en) uses the latest version of TGS without tracking/malware

aidswidjaja avatar Feb 17 '21 11:02 aidswidjaja

https://github.com/gioxx/MarvellousSuspender is clean @justingoldberg

Technetium1 avatar Feb 17 '21 20:02 Technetium1