Total Password
Based on the RiskyPlugins AI security review of the observed evidence.
Analysis record
- Analysed
- 11 months ago
- Version
- v1.2.1
- Artifact
- SHA256 429…C07
- Source
- Findings (non-IoC)
No Findings
All security checks passed
Publisher Evidence
Limited evidencePublisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.
12 evidence rows available.
No Threats Detected
This extension passed all security checks
AI Security Report
AI Security Review
Evidence context: threat category none; evidence quality moderate.
The Total Password extension has a large number of code-smell findings, primarily driven by YARA rule matches. However, these matches are related to postinstall scripts and file manipulation, which could be part of the extension's legitimate functionality as a password manager. The extension's manifest declares the 'tabs' permission, which is potentially sensitive but necessary for its intended purpose. Notably, there are no malware signatures or IoC matches that would indicate malicious behavior. The developer name is provided, and the extension has a significant user count. A skeptic might argue that the numerous YARA rule matches indicate potential malicious activity, but given the context of a password manager and the lack of concrete evidence, this seems unlikely. The strongest counterargument to the verdict would be the presence of postinstall scripts, which could potentially be used for malicious purposes. However, without more specific evidence of malicious intent or behavior, it's reasonable to conclude that these scripts are part of the extension's normal operation.
Key Reasons
- No malware signatures or IoC matches
- YARA rule matches related to postinstall scripts and file manipulation
- Manifest declares 'tabs' permission, which is potentially sensitive but necessary
- Developer name is provided, and the extension has a significant user count
False Positive Considerations
- YARA code-smell rules
- IoC extractor garbage
Reviewed 2026-05-23; recommended action: no action; model confidence 80%.
Source Code Not Available
Source code is not available for this version of the extension.
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
Total WebShield: Chrome Antivirus Protection
[email protected]
Total Search - Safer Searching, Smarter Browsing
[email protected]
Total Adblock - Ad Blocker
[email protected]
KOLTOOL:查找 YouTube、TikTok 和 Instagram 上的相似博主
[email protected]
【永久免费】TikTok爆单神器,商品自动提报采集邀评-种草星球
[email protected]
Kindredly - A safer, private web for families
[email protected]