Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

❗HEADS-UP❗ "Custom JS for Websites 3" is on G. store with an identical icon to v2, no ref. to open-source origins... #880

Open
illtellyoulater opened this issue May 20, 2023 · 10 comments

Comments

@illtellyoulater
Copy link

illtellyoulater commented May 20, 2023

I just uninstalled a highly suspicious extension, called: Custom Javascript for Websites 3.
This is currently available on the google store and is using exactly the same icon of this extension.

In the description the dev describes how they finally managed to fix this or that bug, and how he improved this or that feature, basically doing all they can to build a sense of continuity with the past...
But as soon as I realized how none of those pages made the slightest reference about open source software, I immediately uninstalled it, reported all this to google...
Please do the same, in your own interest and to protect the devs working on this project from any bad associations.

@Producdevity
Copy link

Producdevity commented Sep 21, 2023

The link is broken? Or does that mean that it has been removed from the Chrome Web Store?

@xcv58
Copy link
Owner

xcv58 commented Sep 21, 2023

This is the right link and it hasn't been removed: https://chrome.google.com/webstore/detail/custom-javascript-for-web/fadhnaamieppahmfbeppffbpfkkiohdl

@illtellyoulater
Copy link
Author

@xcv58, okay, if that is the case, why is there no mention on the Chrome extension page that the code originates from this repository, yet it still attempts to visually associate with it?

Why isn't the Chrome extension declared and released as open source, on its page?

Should we blindly trust that the extension contains exactly the same source code as this repository just because it shares the same icon? Or simply because you stated here that this is the actual link for it?

Why not clarify all these details with 100% transparency on the extension page?

Why is the only project identity information on that page "[email protected]" instead of a link to this GitHub repository, which you claimed in your previous comment to be its official home?

I mean, this project is either open source or it's not. It can't be open source here while not declaring itself as such on the URL you describe as its official Chrome extension page, especially given the total lack of shared identifying information between the two pages.

@xcv58
Copy link
Owner

xcv58 commented Jan 29, 2024

@xcv58, okay, if that is the case, why is there no mention on the Chrome extension page that the code originates from this repository, yet it still attempts to visually associate with it?

Why isn't the Chrome extension declared and released as open source, on its page?

Should we blindly trust that the extension contains exactly the same source code as this repository just because it shares the same icon? Or simply because you stated here that this is the actual link for it?

Why not clarify all these details with 100% transparency on the extension page?

Why is the only project identity information on that page "[email protected]" instead of a link to this GitHub repository, which you claimed in your previous comment to be its official home?

I mean, this project is either open source or it's not. It can't be open source here while not declaring itself as such on the URL you describe as its official Chrome extension page, especially given the total lack of shared identifying information between the two pages.

It’s someone else publish the https://chrome.google.com/webstore/detail/custom-javascript-for-web/fadhnaamieppahmfbeppffbpfkkiohdl extension. I don’t know the author nor control that extension (Custom JavaScript for Websites). Do I cannot answer your question.

@xcv58
Copy link
Owner

xcv58 commented Jan 29, 2024

To be clear. You should not believe nor install the Custom JavaScript for Websites extension. I never claimed it’s “official” but just clarify the correct web store link to the extension.

@illtellyoulater
Copy link
Author

illtellyoulater commented Jan 31, 2024

Ok gotcha, I wasn't aware my initial comment had an error in the URL to the extension I was referring to. I fixed it now to avoid any possibile further confusion.

With that cleared, are you confirming the extension on the Chrome web store is unrelated from the one is repo, despite the identical naming and icon?

@xcv58
Copy link
Owner

xcv58 commented Jan 31, 2024

Ok gotcha, I wasn't aware my initial comment had an error in the URL to the extension I was referring to. I fixed it now to avoid any possibile further confusion.

With that cleared, are you confirming the extension on the Chrome web store is unrelated from the one is repo, despite the identical naming and icon?

I don't know who published that "Custom JavaScript for Websites 3" and it has nothing to do with this repo.

@illtellyoulater
Copy link
Author

illtellyoulater commented Feb 2, 2024

Ok thank you for clarifying that.
Just one last question. In order to protect this code base as well as its contributors' reputation, would you not not advise reporting the extension on google as potentially unsafe / malicious (or whatever best applies) ?

@xcv58
Copy link
Owner

xcv58 commented Feb 2, 2024

I recommend everyone report the extension as potentially unsafe/malicious/copyright violation. Thank you so much!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants