SYToolsSecurity Analysis

Chromev26.1200.3MV3February 16, 2026 at 03:19 PM
9.2CRITICAL
9.2 CRITICAL

This extension shows critical risk indicators. It requests highly sensitive permissions combined with suspicious code patterns. Proceed with extreme caution.

Based on 36 permissions including high-risk ones, 16 code findings, 1 dangerous combination.

Dangerous Combinations(1)

HIGHTab tracking + external communication

Extension tracks open tabs and communicates with external servers — potential browsing surveillance.

tabs+external network request
Permissions
10.0/10
Code
9.9/10
Combinations
7.0/10
Manifest/CSP
5.0/10

Permissions(36 analyzed)

Code Findings(8 patterns, 16 total)

Content Security Policy

No CSP Defined(1 issue)
MEDIUM
N/ANo CSP defined

This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.

Manifest Analysis(2 findings)

MEDIUM
web_accessible_resourcesJS files exposed to web pages

JavaScript files are exposed as web-accessible resources. Matched websites can load and interact with extension scripts.

LOW
externally_connectableExternal messaging enabled

Extension accepts messages from 26 external pattern(s). Verify these are trusted origins.

External Domains(6)

.*update.*api.sbis.rubugzilla.mozilla.orgextensionworkshop.comgithub.comstackoverflow.com

Indicators of Compromise

8 indicators of compromise found

File Statistics

11
Total Files
4
JS Files
335.0 KB
Total Size

Other Scanned Extensions