• blackhole@piefed.social
    link
    fedilink
    English
    arrow-up
    24
    ·
    2 days ago

    I don’t know if I’d say promote. It’s likely there because of possibly fake reviews giving it 5 stars.

    I reported it though, not sure about malware but it’s clearly trying to copy an existing extension.

    • XLE@piefed.social
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 day ago

      Add-on stores are disappointing across the board. I struggled to find the official Firefox “turn any URL into a sidebar” extension the other day, and Google isn’t much better (their PiP extension won’t come up if you search “PiP” or even “picture in”).

      Considering Mozilla purchased and then cannibalized FakeSpot, you’d figure they would have the technology for identifying fake or sketchy reviews.

    • Ephera@lemmy.ml
      link
      fedilink
      English
      arrow-up
      6
      ·
      2 days ago

      Yeah, in what OP screenshotted, they’re just showing off any extensions, not specifically particularly good ones. Obviously, fraudulent or malicious extensions are not supposed to be in the add-ons store to begin with, though.

      They do have a separate quality gate for extensions that are genuinely recommended to users.

  • katy ✨@piefed.blahaj.zone
    link
    fedilink
    English
    arrow-up
    7
    ·
    2 days ago

    i don’t think it’s malware looking at the source but I did use the reporting tool on the addon page to report it as a clone

    • Wispy2891@lemmy.worldOP
      link
      fedilink
      arrow-up
      5
      ·
      1 day ago

      Maybe they are waiting to have a big enough install base before pushing obfuscated malicious code in an automatic update

  • nate3d@lemmy.world
    link
    fedilink
    arrow-up
    8
    arrow-down
    6
    ·
    edit-2
    2 days ago

    Huh? Do you know what tamper monkey even is? It’s simply just a JS injector you can do even with the dev tools with the regular browser now with no extensions installed. This extension simply automates this process and is extensively used for modding browser based games. It’s not malware or for malicious use in and of itself.

    Edit: it’s the name squatting “Tamper monkey” versus the official “Tampermonkey” extension