This extension shows some risk signals that are common in legitimate extensions but worth reviewing. Check the details below.
Based on 2 permissions including high-risk ones, 3 code findings, 1 dangerous combination.
Extension has cookie access and sends data to external servers — potential session token theft.
This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.
Resolved from __MSG_* i18n placeholders:
Name: Ecosia - The search engine that plants trees
Description: This extension sets your search engine to Ecosia and customizes your new tab page so you can plant trees with every search.
Extension accepts messages from 1 external pattern(s). Verify these are trusted origins.
4 indicators of compromise found