This extension requests significant permissions. It has 6M+ users, a 4.4 star rating, but review the findings below.
This extension shows some risk signals that are common in legitimate extensions but worth reviewing. Check the details below.
Based on 8 permissions including high-risk ones, 20 code findings, 1 dangerous combination.
Extension has access to all sites and captures keyboard input — behavior consistent with a keylogger.
This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.
Resolved from __MSG_* i18n placeholders:
Name: iCloud Passwords
Description: iCloud Passwords lets you fill passwords from iCloud Keychain when signing in to websites using Chrome.
Web-accessible resources use <all_urls> or wildcard patterns, exposing resources to every website.
Content script matches <all_urls>, executing on every website the user visits.
75 indicators of compromise found