This extension shows concerning patterns that may indicate risky behavior. Proceed with caution.
This extension shows significant risk signals. Review the findings below carefully before installing or continuing to use it.
Based on 8 permissions including high-risk ones, 102 code findings, 3 dangerous combinations.
Extension uses chrome.cookies.getAll for bulk cookie access and sends data to external servers — high risk of session token theft.
Extension reads browsing history and sends data externally — potential history exfiltration.
Extension has access to all sites and captures keyboard input — behavior consistent with a keylogger.
16 libraries detected, 11 with known vulnerabilities
This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.
Resolved from __MSG_* i18n placeholders:
Name: Web Developer
Description: Adds a toolbar button with various web developer tools.
JavaScript files are accessible to ALL websites. Any page can load and interact with these scripts, enabling web→extension attacks.
Web-accessible resources use <all_urls> or wildcard patterns, exposing resources to every website.
Content script matches <all_urls>, executing on every website the user visits.
13 indicators of compromise found