Chrome extension no longer available in the Chrome web store about php-console HOT 14 OPEN

Please upload again. Need it as well!
At the moment I'm getting the repository and load it in Chrome by hand with the following steps

Download the repo from: https://github.com/barbushin/php-console-extension
Unzip it
Go to : chrome://extensions/
Allow developer mode and "Load unpacked"

from php-console.

It's likely a false positive (the last update in the Web store matches the last update date in https://github.com/barbushin/php-console-extension).

Nonetheless, you can still install the extension manually by downloading https://github.com/barbushin/php-console-extension, unzip and then go to chrome://extensions and click Load unpacked, select the folder and done

from php-console.

this has always been a tool intended for local environments or test machines and not to be used in production - no matter how safe; source code is here and on the matching Chrome extension, there doesn't seem to be anything that points to a safety issue for the intended use case

from php-console.

Confirmed - cannot find the extension - I need it!! Help!

from php-console.

yeah @gr0uch0dev that's an option too - however I'd like to know if the extension is going to be permanently out of the repository or if it's gonna be re-uploaded: based on that feedback I might change the documentation for a project that uses php-console

CC @barbushin

from php-console.

anyone know what's going on with this?

@barbushin ?

from php-console.

@gr0uch0dev This worked for me - Thank you!!!
Due to the complete lack of response on this thread, I'm now quite worried about the future of this extension. Tried another extension (Clockwork), which functions similarly, but I don't like it. Thankfully, for now I can roll back to this trusty tool.

from php-console.

@unfulvio @steveramos

It seems the author hasn't been on GitHub all year, and probably removed the extension after it got put under the spotlight on HackTheBox. If you are using this, don't, it has some serious security issues and an MIA maintainer.

from php-console.

Yep true.

There was an open challenge on HTB about this add-on. Be careful :)

from php-console.

This is not meant for a production environment. Of course you have security risks if you are running this in production, it has enable eval terminal in the UI. Its meant for development.

from php-console.

Yeah, Chrome just nuked this for me...

from php-console.

Just got disabled for me. Was this a security risk with it enabled? The lack of information other than being disabled and "This extension contains malware" is a little concerning.

from php-console.

Same here. This has been my go-to debugging tool for years. Not happy about having to find an alternative.

from php-console.

@goldingdamien Yeah, wondering about the same thing. Can't find any information. The repo itself hasn't been updated, so I assume someone managed to takeover the Google account and upload a version with malware.

On the other hand, the actual extension directory shows it was last updated July 7, 2019, so it doesn't look like a version with actual malware made it. Perhaps an attacker tried to upload a version with malware and Google detected it and shut down the whole thing as a precaution.

It hasn't been on the store for a while though, according to this thread. Maybe the attacker tried to restore it.

from php-console.