Is Nature Theme Tab safe?

Medium risk

Nature Theme Tab sends new-tab search terms to Amplitude before running the Chrome search.

When you search from the extension's new-tab page, it posts the search box value to Amplitude analytics before calling Chrome's search API. The analytics event includes the entered keyword along with a user ID and the browser user agent.

billytan2313v1.1.2.5Chrome Web Store
45Risk
Who publishes it

billytan2313 - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
billytan2313
Website
naturethemetab.com/contact.html

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab search terms are sent to Amplitude before Chrome search.

Typing a search in Nature Theme Tab's new-tab page sends the text to Amplitude analytics before it reaches Chrome search.

The request goes to api2.amplitude.com/2/httpapi and includes the search-box input plus event metadata.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user submits a search from the extension's new-tab page.

The extension did this

The extension sends the search term to Amplitude analytics before invoking Chrome search.

Captured request
POSTapi2.amplitude.com/2/httpapi
Fields in the request
  • Search box text
    weather today (illustrative)

    This is the term you typed into the new-tab search form, so it can reveal what you were trying to find.

What it can do

Permissions this extension asks for, as declared in version 1.1.2.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Run searches with your default search engine

    search

Where it sends data

Destinations our analysis observed Nature Theme Tab contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api2.amplitude.comwidely used

    Nature Theme Tab sends data to api2.amplitude.com. A widely used service: 41 other extensions we have analysed send data here.

Updated 30 September 2026fedeonejdgplbipbnefgocgpcbjdmgkk