Picture-in-Picture Extension (by Google)Security Analysis

Chromev1.14MV3February 16, 2026 at 03:35 PM
5.7MEDIUM
5.7 MEDIUM

This extension shows some risk signals that are common in legitimate extensions but worth reviewing. Check the details below.

Based on 4 permissions including high-risk ones, 2 code findings.

Permissions
9.0/10
Code
3.9/10
Combinations
0.0/10
Manifest/CSP
2.6/10

Permissions(4 analyzed)

Code Findings(2 patterns, 2 total)

Content Security Policy

No CSP Defined(1 issue)
MEDIUM
N/ANo CSP defined

This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.

Manifest Analysis(0 findings)

No manifest-level concerns found.

External Domains(1)

www.apache.org

Indicators of Compromise

6 indicators of compromise found

File Statistics

8
Total Files
3
JS Files
10.8 KB
Total Size

Other Scanned Extensions