Live Stream DownloaderSecurity Analysis

Chromev0.5.6MV3March 15, 2026 at 11:46 PM
Use with caution

This extension requests significant permissions. It has 400K+ users, a 4.8 star rating, but review the findings below.

5.1MEDIUM
5.1 MEDIUMRaw: 6.4

This extension shows some risk signals that are common in legitimate extensions but worth reviewing. Check the details below.

Based on 9 permissions including high-risk ones, 32 code findings, 2 dangerous combinations.

Trust Signals(4.8/10)

Users
400K
Rating
4.8(546 reviews)
Status
Featured

Dangerous Combinations(2)

CRITICALNetwork interception + external communication

Extension intercepts network traffic and sends data externally — potential man-in-the-middle behavior.

webRequest/webRequestBlocking+external network request
CRITICALAll-sites access + keyboard capture

Extension has access to all sites and captures keyboard input — behavior consistent with a keylogger.

<all_urls>+keylogger_pattern
Permissions
7.5/10
Code
5.3/10
Combinations
10.0/10
Manifest/CSP
1.7/10

Permissions(9 analyzed)

Code Findings(9 patterns, 32 total)

Content Security Policy

No CSP Defined(1 issue)
MEDIUM
N/ANo CSP defined

This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.

Manifest Analysis(0 findings)

Resolved from __MSG_* i18n placeholders:

Description: Detect and Download M3U8 HLS Streams (HTTP Live Stream) in multiple threads to your local disk

No manifest-level concerns found.

External Domains(14)

a.comdashif-documents.azurewebsites.netdashif.orgdemos.jwplayer.comexample.comgithub.comiandevlin.comnodejs.orgtools.ietf.orgwebbrowsertools.comwebextension.orgww9.0123movie.netwww.mozilla.orgwww.youtube.com

Indicators of Compromise

19 indicators of compromise found

File Statistics

77
Total Files
39
JS Files
643.4 KB
Total Size

Other Scanned Extensions