Duplicate listing on Edge Add-Ons marketplace

[rileydakota]

There is a duplicate Redux-DevTools add-on on the Edge Marketplace: https://microsoftedge.microsoft.com/addons/detail/redux-devtools/anmpkbapfgpmemgdomlejpgljkoflifc

Wanted to check with the maintainers here and see if this is someone affiliated with the project? The manifest.json has some additional permissions and a version that appears well ahead of the current Edge version "version": "3.2.7".

# manifest.json 

{
  "version": "3.9.5.1519",
  "name": "Redux DevTools",
  "description": "The extension provides power-ups for your Redux development workflow",
  "manifest_version": 2,
  "page_action": {
    "default_icon": "img/logo/gray.png",
    "default_title": "Redux DevTools",
    "default_popup": "window.html#popup"
  },
  "commands": {
    "devtools-left": {
      "description": "DevTools window to left"
    },
    "devtools-right": {
      "description": "DevTools window to right"
    },
    "devtools-bottom": {
      "description": "DevTools window to bottom"
    },
    "devtools-remote": {
      "description": "Remote DevTools"
    },
    "_execute_page_action": {
      "suggested_key": {
        "default": "Ctrl+Shift+E"
      }
    }
  },
  "icons": {
    "16": "img/logo/16x16.png",
    "48": "img/logo/48x48.png",
    "128": "img/logo/128x128.png"
  },
  "options_ui": {
    "page": "options.html",
    "chrome_style": true
  },
  "background": {
    "scripts": [
      "background.bundle.js"
    ],
    "persistent": false
  },
  "content_scripts": [
    {
      "matches": [
        "<all_urls>"
      ],
      "exclude_globs": [
        "https://www.google*"
      ],
      "js": [
        "content.bundle.js",
        "pagewrap.bundle.js"
      ],
      "run_at": "document_start",
      "all_frames": true
    }
  ],
  "devtools_page": "devtools.html",
  "web_accessible_resources": [
    "page.bundle.js"
  ],
  "externally_connectable": {
    "ids": [
      "*"
    ]
  },
  "permissions": [
    "notifications",
    "contextMenus",
    "storage",
    "file:///*",
    "http://*/*",
    "https://*/*",
    "cookies",
    "tabs",
    "<all_urls>"
  ],
  "content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'; style-src * 'unsafe-inline'; img-src 'self' data:;",
  "update_url": "https://edge.microsoft.com/extensionwebstorebase/v1/crx"
}

[markerikson]

Huh. That feels very sketchy on multiple levels:

• The listed author is "Angel Yost", and I've never heard that name before
• The version string seems completely off, given that the current extensions/package.json is at 3.2.7
• The extension is listed under the "Sports" category?

[rileydakota]

@markerikson agreed on all fronts. Wanted to get a sanity check here before reporting it to Microsoft (and maybe make others aware).