Skip to content

Commit 7e4a304

Browse files
chore: update feeds 2026-04-27
1 parent b0530c3 commit 7e4a304

19 files changed

Lines changed: 30342 additions & 24051 deletions

browser_extensions_list.csv

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1891,3 +1891,40 @@ AliExpress Deals Countdown - Flash Sale Timer,*jmlgkeaofknfmnbpmlmadnfnfajdlehn*
18911891
lm?oken Chromophore,*bbhaganppipihlhjgaaeeeefbaoihcgi*,bbhaganppipihlhjgaaeeeefbaoihcgi,malware,malicious,https://socket.dev/blog/fake-imtoken-chrome-extension-steals-seed-phrases-via-phishing-redirects,,
18921892
CL Suite by @CLMasters,*jkphinfhmfkckkcnifhjiplhfoiefffl*,jkphinfhmfkckkcnifhjiplhfoiefffl,malware,malicious,https://socket.dev/blog/malicious-chrome-extension-steals-meta-business-manager-exports-and-totp-2fa-seeds,,
18931893
QuickLens - Search Screen with Google Lens,*kdenlnncndfnhkognokgfpabgkgehodd*,kdenlnncndfnhkognokgfpabgkgehodd,malware,malicious,https://annex.security/blog/pixel-perfect/,,
1894+
browser_extension,browser_extension_id_wildcard,browser_extension_id,metadata_category,metadata_type,metadata_link,metadata_comment,crx_file_sha256
1895+
"Bypass","*{7c3a8b88-4dc9-4487-b7f9-736b5f38b957}*","{7c3a8b88-4dc9-4487-b7f9-736b5f38b957}","malware","malicious","https://blog.mozilla.org/security/2021/10/25/securing-the-proxy-api-for-firefox-add-ons/","Firefox - verified internal extension ID - Mozilla-confirmed malicious proxy API abuse - exact ID match required",
1896+
"Bypass XM","*{d61552ef-e2a6-4fb5-bf67-8990f0014957}*","{d61552ef-e2a6-4fb5-bf67-8990f0014957}","malware","malicious","https://blog.mozilla.org/security/2021/10/25/securing-the-proxy-api-for-firefox-add-ons/","Firefox - verified internal extension ID - Mozilla-confirmed malicious proxy API abuse - exact ID match required",
1897+
"Browser Security","*firefox@browser-security.de*","firefox@browser-security.de","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1898+
"Smarttube","*firefox@smarttube.io*","firefox@smarttube.io","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1899+
"Web Security blocked add-on","*{0fde9597-0508-47ff-ad8a-793fa059c4e7}*","{0fde9597-0508-47ff-ad8a-793fa059c4e7}","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1900+
"Browser Privacy","*info@browser-privacy.com*","info@browser-privacy.com","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1901+
"Web Security blocked add-on","*{d3b98a68-fd64-4763-8b66-e15e47ef000a}*","{d3b98a68-fd64-4763-8b66-e15e47ef000a}","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1902+
"Web Security blocked add-on","*{36ea170d-2586-45fb-9f48-5f6b6fd59da7}*","{36ea170d-2586-45fb-9f48-5f6b6fd59da7}","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1903+
"YouTube MP3 Converter & Download","*youtubemp3converter@yttools.io*","youtubemp3converter@yttools.io","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1904+
"Simply Search","*simplysearch@dirtylittlehelpers.com*","simplysearch@dirtylittlehelpers.com","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1905+
"Smarttube - Extreme","*extreme@smarttube.io*","extreme@smarttube.io","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1906+
"Self Destroying Cookies","*selfdestructingcookies@dirtylittlehelpers.com*","selfdestructingcookies@dirtylittlehelpers.com","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1907+
"Web Security blocked add-on","*{27a1b6d8-c6c9-4ddd-bf20-3afa0ccf5040}*","{27a1b6d8-c6c9-4ddd-bf20-3afa0ccf5040}","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1908+
"Web Security blocked add-on","*{2e9cae8b-ee3f-4762-a39e-b53d31dffd37}*","{2e9cae8b-ee3f-4762-a39e-b53d31dffd37}","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1909+
"YouTube - Adblock","*adblock@smarttube.io*","adblock@smarttube.io","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1910+
"Web Security blocked add-on","*{a659bdfa-dbbe-4e58-baf8-70a6975e47d0}*","{a659bdfa-dbbe-4e58-baf8-70a6975e47d0}","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1911+
"Web Security blocked add-on","*{f9455ec1-203a-4fe8-95b6-f6c54a9e56af}*","{f9455ec1-203a-4fe8-95b6-f6c54a9e56af}","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1912+
"Web Security blocked add-on","*{8c85526d-1be9-4b96-9462-aa48a811f4cf}*","{8c85526d-1be9-4b96-9462-aa48a811f4cf}","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1913+
"Amazon Quick Search","*mail@quick-buttons.de*","mail@quick-buttons.de","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1914+
"YouTube Adblocker","*youtubeadblocker@yttools.io*","youtubeadblocker@yttools.io","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1915+
"Browser Safety","*extension@browser-safety.org*","extension@browser-safety.org","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1916+
"Web Security","*contact@web-security.com*","contact@web-security.com","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1917+
"Video Downloader","*videodownloader@dirtylittlehelpers.com*","videodownloader@dirtylittlehelpers.com","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1918+
"Google NoTrack","*googlenotrack@dirtylittlehelpers.com*","googlenotrack@dirtylittlehelpers.com","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1919+
"Quick AMZ","*develop@quick-amz.com*","develop@quick-amz.com","malware","malicious","https://bugzilla.mozilla.org/show_bug.cgi?id=1483995","Firefox - verified internal extension ID - Mozilla hard-blocked Web Security cluster",
1920+
"Twiter X Video Downloader","*{7536027f-96fb-4762-9e02-fdfaedd3bfb5}*","{7536027f-96fb-4762-9e02-fdfaedd3bfb5}","malware","malicious","https://www.koi.ai/blog/darkspectre-unmasking-the-threat-actor-behind-7-8-million-infected-browsers","Firefox - verified internal extension ID - DarkSpectre / Zoom Stealer",
1921+
"x-video-downloader","*xtwitterdownloader@benimaddonum.com*","xtwitterdownloader@benimaddonum.com","malware","malicious","https://www.koi.ai/blog/darkspectre-unmasking-the-threat-actor-behind-7-8-million-infected-browsers","Firefox - verified internal extension ID - DarkSpectre / Zoom Stealer",
1922+
"ShadyPanda Firefox add-on","*{34b0d04c-29cf-473c-bb6c-c2fe94377b99}*","{34b0d04c-29cf-473c-bb6c-c2fe94377b99}","malware","malicious","https://www.koi.ai/blog/darkspectre-unmasking-the-threat-actor-behind-7-8-million-infected-browsers","Firefox - verified internal extension ID - DarkSpectre / ShadyPanda",
1923+
"ShadyPanda Firefox add-on","*{7cc10397-c6f4-4a27-a1e7-83b870dd6cab}*","{7cc10397-c6f4-4a27-a1e7-83b870dd6cab}","malware","malicious","https://www.koi.ai/blog/darkspectre-unmasking-the-threat-actor-behind-7-8-million-infected-browsers","Firefox - verified internal extension ID - DarkSpectre / ShadyPanda",
1924+
"ShadyPanda Firefox add-on","*nickyfeng2@edgetranslate.com*","nickyfeng2@edgetranslate.com","malware","malicious","https://www.koi.ai/blog/darkspectre-unmasking-the-threat-actor-behind-7-8-million-infected-browsers","Firefox - verified internal extension ID - DarkSpectre / ShadyPanda - source defanged domain",
1925+
"ShadyPanda Firefox add-on","*1305302314@qq.com*","1305302314@qq.com","malware","malicious","https://www.koi.ai/blog/darkspectre-unmasking-the-threat-actor-behind-7-8-million-infected-browsers","Firefox - verified internal extension ID - DarkSpectre / ShadyPanda - source defanged domain",
1926+
"ShadyPanda Firefox add-on","*mail@imba97.cn*","mail@imba97.cn","malware","malicious","https://www.koi.ai/blog/darkspectre-unmasking-the-threat-actor-behind-7-8-million-infected-browsers","Firefox - verified internal extension ID - DarkSpectre / ShadyPanda - source defanged domain",
1927+
"ShadyPanda Firefox add-on","*{99d4bddd-5452-4216-83bc-fcd57857b6fb}*","{99d4bddd-5452-4216-83bc-fcd57857b6fb}","malware","malicious","https://www.koi.ai/blog/darkspectre-unmasking-the-threat-actor-behind-7-8-million-infected-browsers","Firefox - verified internal extension ID - DarkSpectre / ShadyPanda",
1928+
"ShadyPanda Firefox add-on","*{f7d2c8aa-e06e-4117-8b99-52a145eb7d23}*","{f7d2c8aa-e06e-4117-8b99-52a145eb7d23}","malware","malicious","https://www.koi.ai/blog/darkspectre-unmasking-the-threat-actor-behind-7-8-million-infected-browsers","Firefox - verified internal extension ID - DarkSpectre / ShadyPanda",
1929+
"ShadyPanda Firefox add-on","*{5f246670-f5e2-45ff-b183-be21cbeb065a}*","{5f246670-f5e2-45ff-b183-be21cbeb065a}","malware","malicious","https://www.koi.ai/blog/darkspectre-unmasking-the-threat-actor-behind-7-8-million-infected-browsers","Firefox - verified internal extension ID - DarkSpectre / ShadyPanda",
1930+
"ShadyPanda Firefox add-on","*{c257a965-0bf8-4934-bf85-9ebf761d1cf8}*","{c257a965-0bf8-4934-bf85-9ebf761d1cf8}","malware","malicious","https://www.koi.ai/blog/darkspectre-unmasking-the-threat-actor-behind-7-8-million-infected-browsers","Firefox - verified internal extension ID - DarkSpectre / ShadyPanda",

0 commit comments

Comments
 (0)