Is New Tab Weather safe?
New Tab Weather sends new-tab search terms and campaign identifiers to vmnapi.net.
New Tab Weather replaces the new tab with a weather and search page. When a user submits a search from that page, the extension sends the typed query, campaign identifier, and hardcoded user identifier to vmnapi.net before opening the search.
Who publishes itVisicom Media - 2 other listings from the same operator, 2 of them carrying a finding
Visicom Media - 2 other listings from the same operator, 2 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 18k+ users between them. 2 of them carry a finding.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
New Tab Weather forwards search terms to vmnapi.net.
When you submit a search from New Tab Weather's new-tab page, the extension forwards the typed search terms to vmnapi.net.
The request includes campaign identifiers from form fields, linking the query to a uid and new-tab campaign context.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user submits a search from the extension's new-tab page.
The extension forwards the typed query and campaign identifiers to vmnapi.net.
- Search termweather tomorrow (illustrative)
The text entered into the new-tab search box is sent as the q parameter.
- Browsing/search activitynew-tab search for weather tomorrow (illustrative)
The request shows that the browser performed a search through the extension's new-tab flow.
What it can do
Permissions this extension asks for, as declared in version 1.08. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Run searches with your default search engine
search
Where it sends data
Destinations our analysis observed Weather Tab contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- vmnapi.net
Weather Tab sends data to vmnapi.net. One other extension we have analysed sends data here.