Is "Nemo PiP – Custom floating video window" on Chrome Web Store Safe to Install?

[email protected] · chrome · v0.1.4

Nemo PiP is a browser extension that upgrades the standard Picture-in-Picture. It lets you: - Seek exactly what you want: jump back/forward 5 / 10 / 15 / 30 seconds. - Change playback speed directly in PiP (0.5x–2x). - Remove black bars / fit the video to the window. - Keep playback in sync with the original video. Perfect for YouTube, online courses, livestreams, news, and multitasking when you watch while working in another tab. Built for people who need precise jumps to favorite moments instead of just basic PiP.

Risk Assessment

Analyzed
67.49
out of 100
HIGH

148 security findings detected across all analyzers

Chrome extension requesting 5 permissions

Severity Breakdown

0
Critical
0
High
124
Medium
24
Low
0
Info

Finding Categories

3
Network
119
IoC Indicators

YARA Rules Matched

8 rules(24 hits)
postinstall obfuscation postinstall file manipulation postinstall network communication postinstall file download postinstall system command postinstall crypto operations OriginsNotVerified NoUseWeakRandom

Requested Permissions

5 permissions
<all_urls>

Access and modify data on every website you visit

Dangerous
activeTab
Medium
tabs
Medium
scripting
Low
windows
Low

About This Extension

Nemo PiP is a browser extension that upgrades the standard Picture-in-Picture. It lets you: - Seek exactly what you want: jump back/forward 5 / 10 / 15 / 30 seconds. - Change playback speed directly in PiP (0.5x–2x). - Remove black bars / fit the video to the window. - Keep playback in sync with the original video. Perfect for YouTube, online courses, livestreams, news, and multitasking when you watch while working in another tab. Built for people who need precise jumps to favorite moments instead of just basic PiP.

Detailed Findings

28 total

YARA Rule Matches

8 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
2
Domains
117
Strings
119

All Indicators · 119

Domain
detected Domain: o.call

XIOC detected Domain: o.call

extracted_from_files

Domain
detected Domain: e.map

XIOC detected Domain: e.map

extracted_from_files

Domain
detected Domain: l.next

XIOC detected Domain: l.next

extracted_from_files

Domain
detected Domain: l.suspense.next

XIOC detected Domain: l.suspense.next

extracted_from_files

Domain
detected Domain: r.style

XIOC detected Domain: r.style

extracted_from_files

Domain
detected Domain: ge.scope.off

XIOC detected Domain: ge.scope.off

extracted_from_files

URL
detected URL: https://vuejs.org/error-reference/#runtime-$

XIOC detected URL: https://vuejs.org/error-reference/#runtime-$

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

Domain
detected Domain: k.name

XIOC detected Domain: k.name

extracted_from_files

Domain
detected Domain: n.name

XIOC detected Domain: n.name

extracted_from_files

Domain
detected Domain: p.is

XIOC detected Domain: p.is

extracted_from_files

Domain
detected Domain: v.style

XIOC detected Domain: v.style

extracted_from_files

Domain
detected Domain: a.next

XIOC detected Domain: a.next

extracted_from_files

Domain
detected Domain: l.scope.off

XIOC detected Domain: l.scope.off

extracted_from_files

Domain
detected Domain: p.id

XIOC detected Domain: p.id

extracted_from_files

Domain
detected Domain: n.next

XIOC detected Domain: n.next

extracted_from_files

Domain
detected Domain: s.call

XIOC detected Domain: s.call

extracted_from_files

Domain
detected Domain: c.call

XIOC detected Domain: c.call

extracted_from_files

Domain
detected Domain: a.run

XIOC detected Domain: a.run

extracted_from_files

Domain
detected Domain: c.ec

XIOC detected Domain: c.ec

extracted_from_files

Domain
detected Domain: r.id

XIOC detected Domain: r.id

extracted_from_files

Domain
detected Domain: i.app

XIOC detected Domain: i.app

extracted_from_files

Domain
detected Domain: p.data

XIOC detected Domain: p.data

extracted_from_files

Domain
detected Domain: c.channel

XIOC detected Domain: c.channel

extracted_from_files

Domain
detected Domain: window.top

XIOC detected Domain: window.top

extracted_from_files

Domain
detected Domain: jn.call

XIOC detected Domain: jn.call

extracted_from_files

Domain
detected Domain: or.call

XIOC detected Domain: or.call

extracted_from_files

Domain
detected Domain: s.sc

XIOC detected Domain: s.sc

extracted_from_files

Domain
detected Domain: s.map

XIOC detected Domain: s.map

extracted_from_files

Domain
detected Domain: i.media

XIOC detected Domain: i.media

extracted_from_files

Domain
detected Domain: i.next

XIOC detected Domain: i.next

extracted_from_files

Domain
detected Domain: m.id

XIOC detected Domain: m.id

extracted_from_files

Domain
detected Domain: re.id

XIOC detected Domain: re.id

extracted_from_files

Domain
detected Domain: htmlmediaelement.network

XIOC detected Domain: htmlmediaelement.network

extracted_from_files

Domain
detected Domain: v.play

XIOC detected Domain: v.play

extracted_from_files

Domain
detected Domain: he.name

XIOC detected Domain: he.name

extracted_from_files

Domain
detected Domain: g.data

XIOC detected Domain: g.data

extracted_from_files

Domain
detected Domain: p.channel

XIOC detected Domain: p.channel

extracted_from_files

Domain
detected Domain: f.call

XIOC detected Domain: f.call

extracted_from_files

Domain
detected Domain: b.data

XIOC detected Domain: b.data

extracted_from_files

Domain
detected Domain: d.channel

XIOC detected Domain: d.channel

extracted_from_files

Domain
detected Domain: a.data

XIOC detected Domain: a.data

extracted_from_files

Domain
detected Domain: o.media

XIOC detected Domain: o.media

extracted_from_files

Domain
detected Domain: e.top

XIOC detected Domain: e.top

extracted_from_files

Domain
detected Domain: s.top

XIOC detected Domain: s.top

extracted_from_files

Domain
detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain
detected Domain: o.document.open

XIOC detected Domain: o.document.open

extracted_from_files

Domain
detected Domain: re.call

XIOC detected Domain: re.call

extracted_from_files

Domain
detected Domain: j.open

XIOC detected Domain: j.open

extracted_from_files

Domain
detected Domain: ee.id

XIOC detected Domain: ee.id

extracted_from_files

Domain
detected Domain: b.call

XIOC detected Domain: b.call

extracted_from_files

Domain
detected Domain: de.call

XIOC detected Domain: de.call

extracted_from_files

Domain
detected Domain: w.play

XIOC detected Domain: w.play

extracted_from_files

Domain
detected Domain: t.stream

XIOC detected Domain: t.stream

extracted_from_files

Domain
detected Domain: t.srcvideo.play

XIOC detected Domain: t.srcvideo.play

extracted_from_files

Domain
detected Domain: u.data

XIOC detected Domain: u.data

extracted_from_files

Domain
detected Domain: m.channel

XIOC detected Domain: m.channel

extracted_from_files

Domain
detected Domain: s.style

XIOC detected Domain: s.style

extracted_from_files

Domain
detected Domain: e.scope.off

XIOC detected Domain: e.scope.off

extracted_from_files

Domain
detected Domain: je.scope.off

XIOC detected Domain: je.scope.off

extracted_from_files

Domain
detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain
detected Domain: e.style

XIOC detected Domain: e.style

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: y.call

XIOC detected Domain: y.call

extracted_from_files

Domain
detected Domain: q.id

XIOC detected Domain: q.id

extracted_from_files

Domain
detected Domain: c.next

XIOC detected Domain: c.next

extracted_from_files

Domain
detected Domain: c.suspense.next

XIOC detected Domain: c.suspense.next

extracted_from_files

Domain
detected Domain: b.id

XIOC detected Domain: b.id

extracted_from_files

Domain
detected Domain: d.call

XIOC detected Domain: d.call

extracted_from_files

Domain
detected Domain: t.style

XIOC detected Domain: t.style

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: q.name

XIOC detected Domain: q.name

extracted_from_files

Domain
detected Domain: d.name

XIOC detected Domain: d.name

extracted_from_files

Domain
detected Domain: q.is

XIOC detected Domain: q.is

extracted_from_files

Domain
detected Domain: h.style

XIOC detected Domain: h.style

extracted_from_files

Domain
detected Domain: j.style

XIOC detected Domain: j.style

extracted_from_files

Domain
detected Domain: g.next

XIOC detected Domain: g.next

extracted_from_files

Domain
detected Domain: c.scope.off

XIOC detected Domain: c.scope.off

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: k.id

XIOC detected Domain: k.id

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: e.exposed

XIOC detected Domain: e.exposed

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: t.call

XIOC detected Domain: t.call

extracted_from_files

Domain
detected Domain: o.app

XIOC detected Domain: o.app

extracted_from_files

Domain
detected Domain: l.call

XIOC detected Domain: l.call

extracted_from_files

Domain
detected Domain: f.run

XIOC detected Domain: f.run

extracted_from_files

Domain
detected Domain: object.prototype.propertyisenumerable.call

XIOC detected Domain: object.prototype.propertyisenumerable.call

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: r.ec

XIOC detected Domain: r.ec

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: s.id

XIOC detected Domain: s.id

extracted_from_files

Domain
detected Domain: a.call

XIOC detected Domain: a.call

extracted_from_files

Domain
detected Domain: d.next

XIOC detected Domain: d.next

extracted_from_files

Domain
detected Domain: i.call

XIOC detected Domain: i.call

extracted_from_files

Domain
detected Domain: has.call

XIOC detected Domain: has.call

extracted_from_files

Domain
detected Domain: r.call

XIOC detected Domain: r.call

extracted_from_files

Domain
detected Domain: n.sc

XIOC detected Domain: n.sc

extracted_from_files

Domain
detected Domain: n.map

XIOC detected Domain: n.map

extracted_from_files

Domain
detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain
detected Domain: this.sc

XIOC detected Domain: this.sc

extracted_from_files

Domain
detected Domain: e.dep.sc

XIOC detected Domain: e.dep.sc

extracted_from_files

Domain
detected Domain: i.map

XIOC detected Domain: i.map

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: ar.call

XIOC detected Domain: ar.call

extracted_from_files

Domain
detected Domain: ri.call

XIOC detected Domain: ri.call

extracted_from_files

Domain
detected Domain: object.is

XIOC detected Domain: object.is

extracted_from_files

Domain
detected Domain: this.next

XIOC detected Domain: this.next

extracted_from_files

Domain
detected Domain: this.run

XIOC detected Domain: this.run

extracted_from_files

Domain
detected Domain: e.next

XIOC detected Domain: e.next

extracted_from_files

Domain
detected Domain: t.next

XIOC detected Domain: t.next

extracted_from_files

Domain
detected Domain: globalthis.chrome

XIOC detected Domain: globalthis.chrome

extracted_from_files

Domain
detected Domain: globalthis.chrome.runtime.id

XIOC detected Domain: globalthis.chrome.runtime.id

extracted_from_files

Domain
detected Domain: globalthis.browser.runtime.id

XIOC detected Domain: globalthis.browser.runtime.id

extracted_from_files

Domain
detected Domain: n.call

XIOC detected Domain: n.call

extracted_from_files

Domain
detected Domain: i.id

XIOC detected Domain: i.id

extracted_from_files

Domain
detected Domain: vuejs.org

XIOC detected Domain: vuejs.org

extracted_from_files

Domain
detected Domain: v.call

XIOC detected Domain: v.call

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Nemo PiP – Custom floating video window is a Chrome Web Store extension published by [email protected]. Version 0.1.4 has been analyzed by the Risky Plugins security platform, receiving a risk score of 67.49/100 (HIGH risk) based on 148 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • Medium: 124 finding(s)
  • Low: 24 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Nemo PiP – Custom floating video window is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 134 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions