Emoboard Emoji KeyboardSecurity Analysis

Chromev1.0.3MV3February 18, 2026 at 11:34 AM
Potentially unsafe

This extension shows concerning patterns that may indicate risky behavior. Proceed with caution.

6.8HIGH
6.8 HIGHRaw: 7.5

This extension shows significant risk signals. Review the findings below carefully before installing or continuing to use it.

Based on 4 permissions including high-risk ones, 11 code findings, 1 dangerous combination.

Trust Signals(2.5/10)

Users
10K
Rating
4.3(26 reviews)
Status
Featured

Dangerous Combinations(1)

CRITICALAll-sites access + keyboard capture

Extension has access to all sites and captures keyboard input — behavior consistent with a keylogger.

<all_urls>+keylogger_pattern
Permissions
7.0/10
Code
7.9/10
Combinations
10.0/10
Manifest/CSP
3.9/10

Permissions(4 analyzed)

Code Findings(10 patterns, 11 total)

Content Security Policy

No CSP Defined(1 issue)
MEDIUM
N/ANo CSP defined

This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.

Manifest Analysis(1 finding)

Resolved from __MSG_* i18n placeholders:

Name: Emoboard Emoji Keyboard

Description: Express Yourself with EmoBoard: The Ultimate Emoji Keyboard with Auto Search, Auto Insert, Emoji History, Shortcuts, and Dark Mode!

HIGH
content_scriptsAggressive content script injection

Content script runs at document_start in ALL frames on ALL URLs. This gives the extension deep access to every page load, including iframes.

External Domains(3)

github.comnpms.ioreactjs.org

Indicators of Compromise

7 indicators of compromise found

File Statistics

78
Total Files
3
JS Files
1.4 MB
Total Size

Other Scanned Extensions