Is "Nemo PiP – Custom floating video window" on Chrome Web Store Safe to Install?
Nemo PiP is a browser extension that upgrades the standard Picture-in-Picture. It lets you: - Seek exactly what you want: jump back/forward 5 / 10 / 15 / 30 seconds. - Change playback speed directly in PiP (0.5x–2x). - Remove black bars / fit the video to the window. - Keep playback in sync with the original video. Perfect for YouTube, online courses, livestreams, news, and multitasking when you watch while working in another tab. Built for people who need precise jumps to favorite moments instead of just basic PiP.
Risk Assessment
Analyzed148 security findings detected across all analyzers
Chrome extension requesting 5 permissions
Severity Breakdown
Finding Categories
YARA Rules Matched
8 rules(24 hits)Requested Permissions
5 permissionsAccess and modify data on every website you visit
About This Extension
Detailed Findings
28 totalYARA Rule Matches
8 rulesIndicators of Compromise
Network indicators, suspicious strings, and potential IoCs extracted during analysis
All Indicators · 119
detected Domain: o.call XIOC detected Domain: o.call
extracted_from_files
detected Domain: e.map XIOC detected Domain: e.map
extracted_from_files
detected Domain: l.next XIOC detected Domain: l.next
extracted_from_files
detected Domain: l.suspense.next XIOC detected Domain: l.suspense.next
extracted_from_files
detected Domain: r.style XIOC detected Domain: r.style
extracted_from_files
detected Domain: ge.scope.off XIOC detected Domain: ge.scope.off
extracted_from_files
detected URL: https://vuejs.org/error-reference/#runtime-$ XIOC detected URL: https://vuejs.org/error-reference/#runtime-$
extracted_from_files
detected URL: https://clients2.google.com/service/update2/crx XIOC detected URL: https://clients2.google.com/service/update2/crx
extracted_from_files
detected Domain: k.name XIOC detected Domain: k.name
extracted_from_files
detected Domain: n.name XIOC detected Domain: n.name
extracted_from_files
detected Domain: p.is XIOC detected Domain: p.is
extracted_from_files
detected Domain: v.style XIOC detected Domain: v.style
extracted_from_files
detected Domain: a.next XIOC detected Domain: a.next
extracted_from_files
detected Domain: l.scope.off XIOC detected Domain: l.scope.off
extracted_from_files
detected Domain: p.id XIOC detected Domain: p.id
extracted_from_files
detected Domain: n.next XIOC detected Domain: n.next
extracted_from_files
detected Domain: s.call XIOC detected Domain: s.call
extracted_from_files
detected Domain: c.call XIOC detected Domain: c.call
extracted_from_files
detected Domain: a.run XIOC detected Domain: a.run
extracted_from_files
detected Domain: c.ec XIOC detected Domain: c.ec
extracted_from_files
detected Domain: r.id XIOC detected Domain: r.id
extracted_from_files
detected Domain: i.app XIOC detected Domain: i.app
extracted_from_files
detected Domain: p.data XIOC detected Domain: p.data
extracted_from_files
detected Domain: c.channel XIOC detected Domain: c.channel
extracted_from_files
detected Domain: window.top XIOC detected Domain: window.top
extracted_from_files
detected Domain: jn.call XIOC detected Domain: jn.call
extracted_from_files
detected Domain: or.call XIOC detected Domain: or.call
extracted_from_files
detected Domain: s.sc XIOC detected Domain: s.sc
extracted_from_files
detected Domain: s.map XIOC detected Domain: s.map
extracted_from_files
detected Domain: i.media XIOC detected Domain: i.media
extracted_from_files
detected Domain: i.next XIOC detected Domain: i.next
extracted_from_files
detected Domain: m.id XIOC detected Domain: m.id
extracted_from_files
detected Domain: re.id XIOC detected Domain: re.id
extracted_from_files
detected Domain: htmlmediaelement.network XIOC detected Domain: htmlmediaelement.network
extracted_from_files
detected Domain: v.play XIOC detected Domain: v.play
extracted_from_files
detected Domain: he.name XIOC detected Domain: he.name
extracted_from_files
detected Domain: g.data XIOC detected Domain: g.data
extracted_from_files
detected Domain: p.channel XIOC detected Domain: p.channel
extracted_from_files
detected Domain: f.call XIOC detected Domain: f.call
extracted_from_files
detected Domain: b.data XIOC detected Domain: b.data
extracted_from_files
detected Domain: d.channel XIOC detected Domain: d.channel
extracted_from_files
detected Domain: a.data XIOC detected Domain: a.data
extracted_from_files
detected Domain: o.media XIOC detected Domain: o.media
extracted_from_files
detected Domain: e.top XIOC detected Domain: e.top
extracted_from_files
detected Domain: s.top XIOC detected Domain: s.top
extracted_from_files
detected Domain: window.open XIOC detected Domain: window.open
extracted_from_files
detected Domain: o.document.open XIOC detected Domain: o.document.open
extracted_from_files
detected Domain: re.call XIOC detected Domain: re.call
extracted_from_files
detected Domain: j.open XIOC detected Domain: j.open
extracted_from_files
detected Domain: ee.id XIOC detected Domain: ee.id
extracted_from_files
detected Domain: b.call XIOC detected Domain: b.call
extracted_from_files
detected Domain: de.call XIOC detected Domain: de.call
extracted_from_files
detected Domain: w.play XIOC detected Domain: w.play
extracted_from_files
detected Domain: t.stream XIOC detected Domain: t.stream
extracted_from_files
detected Domain: t.srcvideo.play XIOC detected Domain: t.srcvideo.play
extracted_from_files
detected Domain: u.data XIOC detected Domain: u.data
extracted_from_files
detected Domain: m.channel XIOC detected Domain: m.channel
extracted_from_files
detected Domain: s.style XIOC detected Domain: s.style
extracted_from_files
detected Domain: e.scope.off XIOC detected Domain: e.scope.off
extracted_from_files
detected Domain: je.scope.off XIOC detected Domain: je.scope.off
extracted_from_files
detected Domain: array.prototype.slice.call XIOC detected Domain: array.prototype.slice.call
extracted_from_files
detected Domain: e.style XIOC detected Domain: e.style
extracted_from_files
detected Domain: date.now XIOC detected Domain: date.now
extracted_from_files
detected Domain: y.call XIOC detected Domain: y.call
extracted_from_files
detected Domain: q.id XIOC detected Domain: q.id
extracted_from_files
detected Domain: c.next XIOC detected Domain: c.next
extracted_from_files
detected Domain: c.suspense.next XIOC detected Domain: c.suspense.next
extracted_from_files
detected Domain: b.id XIOC detected Domain: b.id
extracted_from_files
detected Domain: d.call XIOC detected Domain: d.call
extracted_from_files
detected Domain: t.style XIOC detected Domain: t.style
extracted_from_files
detected Domain: e.target XIOC detected Domain: e.target
extracted_from_files
detected Domain: q.name XIOC detected Domain: q.name
extracted_from_files
detected Domain: d.name XIOC detected Domain: d.name
extracted_from_files
detected Domain: q.is XIOC detected Domain: q.is
extracted_from_files
detected Domain: h.style XIOC detected Domain: h.style
extracted_from_files
detected Domain: j.style XIOC detected Domain: j.style
extracted_from_files
detected Domain: g.next XIOC detected Domain: g.next
extracted_from_files
detected Domain: c.scope.off XIOC detected Domain: c.scope.off
extracted_from_files
detected Domain: e.name XIOC detected Domain: e.name
extracted_from_files
detected Domain: k.id XIOC detected Domain: k.id
extracted_from_files
detected Domain: e.data XIOC detected Domain: e.data
extracted_from_files
detected Domain: e.exposed XIOC detected Domain: e.exposed
extracted_from_files
detected Domain: e.call XIOC detected Domain: e.call
extracted_from_files
detected Domain: t.call XIOC detected Domain: t.call
extracted_from_files
detected Domain: o.app XIOC detected Domain: o.app
extracted_from_files
detected Domain: l.call XIOC detected Domain: l.call
extracted_from_files
detected Domain: f.run XIOC detected Domain: f.run
extracted_from_files
detected Domain: object.prototype.propertyisenumerable.call XIOC detected Domain: object.prototype.propertyisenumerable.call
extracted_from_files
detected Domain: t.name XIOC detected Domain: t.name
extracted_from_files
detected Domain: r.ec XIOC detected Domain: r.ec
extracted_from_files
detected Domain: e.id XIOC detected Domain: e.id
extracted_from_files
detected Domain: s.id XIOC detected Domain: s.id
extracted_from_files
detected Domain: a.call XIOC detected Domain: a.call
extracted_from_files
detected Domain: d.next XIOC detected Domain: d.next
extracted_from_files
detected Domain: i.call XIOC detected Domain: i.call
extracted_from_files
detected Domain: has.call XIOC detected Domain: has.call
extracted_from_files
detected Domain: r.call XIOC detected Domain: r.call
extracted_from_files
detected Domain: n.sc XIOC detected Domain: n.sc
extracted_from_files
detected Domain: n.map XIOC detected Domain: n.map
extracted_from_files
detected Domain: this.map XIOC detected Domain: this.map
extracted_from_files
detected Domain: this.sc XIOC detected Domain: this.sc
extracted_from_files
detected Domain: e.dep.sc XIOC detected Domain: e.dep.sc
extracted_from_files
detected Domain: i.map XIOC detected Domain: i.map
extracted_from_files
detected Domain: t.map XIOC detected Domain: t.map
extracted_from_files
detected Domain: ar.call XIOC detected Domain: ar.call
extracted_from_files
detected Domain: ri.call XIOC detected Domain: ri.call
extracted_from_files
detected Domain: object.is XIOC detected Domain: object.is
extracted_from_files
detected Domain: this.next XIOC detected Domain: this.next
extracted_from_files
detected Domain: this.run XIOC detected Domain: this.run
extracted_from_files
detected Domain: e.next XIOC detected Domain: e.next
extracted_from_files
detected Domain: t.next XIOC detected Domain: t.next
extracted_from_files
detected Domain: globalthis.chrome XIOC detected Domain: globalthis.chrome
extracted_from_files
detected Domain: globalthis.chrome.runtime.id XIOC detected Domain: globalthis.chrome.runtime.id
extracted_from_files
detected Domain: globalthis.browser.runtime.id XIOC detected Domain: globalthis.browser.runtime.id
extracted_from_files
detected Domain: n.call XIOC detected Domain: n.call
extracted_from_files
detected Domain: i.id XIOC detected Domain: i.id
extracted_from_files
detected Domain: vuejs.org XIOC detected Domain: vuejs.org
extracted_from_files
detected Domain: v.call XIOC detected Domain: v.call
extracted_from_files
detected Domain: object.prototype.hasownproperty.call XIOC detected Domain: object.prototype.hasownproperty.call
extracted_from_files
Security Analysis Summary
Security Analysis Overview
Nemo PiP – Custom floating video window is a Chrome Web Store extension published by [email protected]. Version 0.1.4 has been analyzed by the Risky Plugins security platform, receiving a risk score of 67.49/100 (HIGH risk) based on 148 security findings.
Risk Assessment
This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.
Findings Breakdown
- Medium: 124 finding(s)
- Low: 24 finding(s)
What Was Analyzed
The security assessment covers multiple analysis categories:
- Malware Detection: YARA rule matching against 2,400+ malware signatures
- Secret Detection: Scanning for exposed API keys, tokens, and credentials
- Static Analysis: Code-level security analysis for common vulnerability patterns
- Network Analysis: Detection of suspicious network communications and endpoints
- Obfuscation Detection: Identification of code obfuscation techniques
Developer Information
Nemo PiP – Custom floating video window is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 134 users.
Recommendation
This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.
Source Code Not Available
Source code is not available for this version of the extension.
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
NemoAI: Read, Translate, Summarize & Analyze (Web & Video)
[email protected]
Nemo Cookie Anywhere
[email protected]
Ship Xanh copy sản phẩm, nhân bản shop, hiển thị % phí sàn, lượt bán tháng
[email protected]
!Status Portfolio Wallet (Beta)
[email protected]
KPN Password Manager
[email protected]
Attachment Metadata Removal for Gmail
[email protected]