Is ALAM Emirates ID Reader M_V_3 safe?
ALAM Emirates ID Reader lets any website trigger its native ID-reader app and read your clipboard through an unrestricted page event.
The extension's content script runs on every website and listens for a same-page 'EID_EVENT' signal that a website's own code can dispatch, with no check on which sites are allowed to do so. When that signal fires, the extension launches its companion Emirates ID reader app on your computer via native messaging, then reads your system clipboard and writes the result into the page's own HTML, where the page's script can read it back. In practice, any website you visit can launch the native app and capture whatever is currently on your clipboard.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itAl Dhafra Cooperative Society Head Office - 1 other listing from the same operator, none carrying a finding
Al Dhafra Cooperative Society Head Office - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 1k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging