Is AnySearch browser extension from Apple's Extension Gallery malware?
Solution 1:
You can easily download the extension from the gallery directly and extract it.
$ curl -sO https://safari-extensions.apple.com/extensions/com.matt-swain.anysearch-6M853ET88Q/anysearch.safariextz
$ xar -x -f anysearch.safariextz
$ ls -l AnySearch.safariextension/
total 88
-rw-r--r-- 1 pse staff 2182 Feb 28 15:23 Info.plist
-rw-r--r-- 1 pse staff 1988 Feb 28 15:23 Settings.plist
-rw-r--r-- 1 pse staff 190 Feb 28 15:23 global.html
-rw-r--r-- 1 pse staff 2651 Feb 28 15:23 global.js
-rw-r--r-- 1 pse staff 9707 Feb 28 15:23 icon-128.png
-rw-r--r-- 1 pse staff 4424 Feb 28 15:23 icon-64.png
-rw-r--r-- 1 pse staff 387 Feb 28 15:23 toolbar.png
-rw-r--r-- 1 pse staff 708 Feb 28 15:23 [email protected]
From looking at global.html and global.js there doesn't seem to be anything fishy going on.