This extension shows critical risk indicators. It requests highly sensitive permissions combined with suspicious code patterns. Proceed with extreme caution.
Based on 7 permissions including high-risk ones, 24 code findings, 2 dangerous combinations.
Extension has cookie access and sends data to external servers — potential session token theft.
Extension has access to all sites and captures keyboard input — behavior consistent with a keylogger.
2 libraries detected
This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.
Resolved from __MSG_* i18n placeholders:
Name: Save to Pinterest
Description: Save ideas to Pinterest.
Web-accessible resources use <all_urls> or wildcard patterns, exposing resources to every website.
Content script matches <all_urls>, executing on every website the user visits.
72 indicators of compromise found