Yandex AccessSecurity Analysis

Chromev5.2.0MV3February 18, 2026 at 11:42 AM
Use with caution

This extension requests significant permissions. It has 1M+ users, a 4.4 star rating, but review the findings below.

4.2MEDIUM
4.2 MEDIUMRaw: 4.7

This extension shows some risk signals that are common in legitimate extensions but worth reviewing. Check the details below.

Based on 7 permissions including high-risk ones, 7 code findings, 1 dangerous combination.

Trust Signals(3.8/10)

Users
1.0M
Rating
4.4(415 reviews)

Dangerous Combinations(1)

HIGHCookie access + external network

Extension has cookie access and sends data to external servers — potential session token theft.

cookies+external network request
Permissions
8.0/10
Code
1.8/10
Combinations
7.0/10
Manifest/CSP
1.7/10

Permissions(7 analyzed)

Code Findings(7 patterns, 7 total)

Content Security Policy

No CSP Defined(1 issue)
MEDIUM
N/ANo CSP defined

This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.

Manifest Analysis(0 findings)

No manifest-level concerns found.

External Domains(10)

${domainbugs.webkit.orgcode.google.comd1cv6bu0xiop18.cloudfront.netecma-international.orges5.github.iomillermedeiros.github.comsoft.export.yandex.rust.yandex-team.ruyandex.ru

Indicators of Compromise

8 indicators of compromise found

File Statistics

5
Total Files
3
JS Files
291.9 KB
Total Size

Other Scanned Extensions