• blackhole@piefed.social
    link
    fedilink
    English
    arrow-up
    26
    ·
    3 months ago

    I don’t know if I’d say promote. It’s likely there because of possibly fake reviews giving it 5 stars.

    I reported it though, not sure about malware but it’s clearly trying to copy an existing extension.

    • Ephera@lemmy.ml
      link
      fedilink
      English
      arrow-up
      7
      ·
      3 months ago

      Yeah, in what OP screenshotted, they’re just showing off any extensions, not specifically particularly good ones. Obviously, fraudulent or malicious extensions are not supposed to be in the add-ons store to begin with, though.

      They do have a separate quality gate for extensions that are genuinely recommended to users.

    • XLE@piefed.social
      link
      fedilink
      English
      arrow-up
      2
      ·
      3 months ago

      Add-on stores are disappointing across the board. I struggled to find the official Firefox “turn any URL into a sidebar” extension the other day, and Google isn’t much better (their PiP extension won’t come up if you search “PiP” or even “picture in”).

      Considering Mozilla purchased and then cannibalized FakeSpot, you’d figure they would have the technology for identifying fake or sketchy reviews.

  • katy ✨@piefed.blahaj.zone
    link
    fedilink
    English
    arrow-up
    9
    ·
    3 months ago

    i don’t think it’s malware looking at the source but I did use the reporting tool on the addon page to report it as a clone

    • Wispy2891@lemmy.worldOP
      link
      fedilink
      arrow-up
      7
      ·
      3 months ago

      Maybe they are waiting to have a big enough install base before pushing obfuscated malicious code in an automatic update

  • nate3d@lemmy.world
    link
    fedilink
    arrow-up
    9
    arrow-down
    6
    ·
    edit-2
    3 months ago

    Huh? Do you know what tamper monkey even is? It’s simply just a JS injector you can do even with the dev tools with the regular browser now with no extensions installed. This extension simply automates this process and is extensively used for modding browser based games. It’s not malware or for malicious use in and of itself.

    Edit: it’s the name squatting “Tamper monkey” versus the official “Tampermonkey” extension

  • JigglySackles@lemmy.world
    link
    fedilink
    arrow-up
    1
    ·
    edit-2
    2 months ago

    Edit: nvm, guess it’s trying to use the name. Good catch

    What’s wrong with Tamper Monkey? It’s just like grease monkey. I’ve used one or the other for ages