Bookmark Favicon ChangerSecurity Analysis

Chromev5.2MV3February 18, 2026 at 12:12 PM
Potentially unsafe

This extension shows concerning patterns that may indicate risky behavior. Proceed with caution.

Known Security Incidents(1)

Critical2024-12Resolved

Compromised in Cyberhaven supply chain attack

Extension was among 35+ extensions compromised in the December 2024 supply chain attack campaign that injected data-stealing code.

6.6HIGH
6.6 HIGH

This extension shows significant risk signals. Review the findings below carefully before installing or continuing to use it.

Based on 13 permissions including high-risk ones, 54 code findings, 2 dangerous combinations.

Trust Signals(1.0/10)

Users
40K
Rating
3.9(259 reviews)

Dangerous Combinations(2)

CRITICALNetwork interception + external communication

Extension intercepts network traffic and sends data externally — potential man-in-the-middle behavior.

webRequest/webRequestBlocking+external network request
CRITICALAll-sites access + keyboard capture

Extension has access to all sites and captures keyboard input — behavior consistent with a keylogger.

<all_urls>+keylogger_pattern
Permissions
7.5/10
Code
5.3/10
Combinations
10.0/10
Manifest/CSP
3.1/10

Permissions(13 analyzed)

Code Findings(11 patterns, 54 total)

Content Security Policy

No CSP Defined(1 issue)
MEDIUM
N/ANo CSP defined

This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.

Manifest Analysis(1 finding)

MEDIUM
web_accessible_resources.matchesOverly broad match patterns

Web-accessible resources use <all_urls> or wildcard patterns, exposing resources to every website.

External Domains(2)

*www.webtoolkit.info

Indicators of Compromise

6 indicators of compromise found

File Statistics

37
Total Files
13
JS Files
480.1 KB
Total Size

Other Scanned Extensions