This extension shows critical risk indicators. It requests highly sensitive permissions combined with suspicious code patterns. Proceed with extreme caution.
Based on 4 permissions including high-risk ones, 40 code findings, 1 dangerous combination.
Extension has access to all sites and captures keyboard input — behavior consistent with a keylogger.
This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.
Content script matches <all_urls>, executing on every website the user visits.
7 indicators of compromise found