OneTabSecurity Analysis

Chromev2.10MV3March 15, 2026 at 11:47 PM
Safe to use

This extension appears safe based on its code analysis and 2M+ users, a 3.5 star rating, is published by OneTab Ltd.

2.9LOW
2.9 LOWRaw: 4.5

This extension shows low risk. Some minor findings were detected but nothing that raises significant concern.

Based on 10 permissions analyzed, 82 code findings, 1 dangerous combination.

Trust Signals(6.0/10)

Users
2.0M
Rating
3.5(14K reviews)
Developer
OneTab Ltd
Status
Featured

Dangerous Combinations(1)

MEDIUMTab tracking API + external communication

Extension uses tab tracking APIs (onUpdated/query) and communicates with external servers — potential browsing surveillance.

tabs+tabs API usage + external network
Permissions
4.0/10
Code
6.8/10
Combinations
4.0/10
Manifest/CSP
0.6/10

Permissions(10 analyzed)

Code Findings(9 patterns, 82 total)

Content Security Policy

CSP Present(1 issue)
LOW
object-srcobject-src not restricted

object-src is not set to 'none'. Plugins like Flash can be embedded, which may allow code execution.

Manifest Analysis(0 findings)

Resolved from __MSG_* i18n placeholders:

Description: Save up to 95% memory and reduce tab clutter

No manifest-level concerns found.

External Domains(6)

${e${ten.wikipedia.orgexample.comwww.example.comwww.one-tab.com

Indicators of Compromise

16 indicators of compromise found

File Statistics

234
Total Files
10
JS Files
5.3 MB
Total Size

Other Scanned Extensions