What are the security risks of Edge Translate - Browser Translator | PDF Translation | MV3 | Open Source?

Based on our automated security analysis, Edge Translate - Browser Translator | PDF Translation | MV3 | Open Source presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Chrome Web Store

Edge Translate - Browser Translator | PDF Translation | MV3 | Open Source

by [email protected] · 244 users · 5.0 rating

09b77077-a2a5-500b-9be8-4064717bd7a9 | v3.2.5

CRITICAL risk

+27 since v3.2.4

Risk verdict

Do not install

Score-based assessment (critical risk, 100/100). No analyst review available.

Analysis record

Analysed: 1 weeks ago
Version: v3.2.5
Artifact: SHA256 098…3E7
Source: Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

1000 detail rows

Showing 25 of 56 · highest severity first

YARA Rule Matches

15 rules

Severity	Rule	Hits	Files	Metadata
HIGH	`supply chain sourcemap appended iife`	103	google/elms/elm_cs.jsgoogle/elms/elm_ht.jsgoogle/elms/elm_is.js +100 more	-
LOW	`LocalStorageShouldNotBeUsed`	2	pdf/web/viewer.mjspdf/web/debugger.mjs	-
LOW	`DebuggerStatementsShouldNotBeUsed`	4	pdf/web/debugger.csspdf/web/viewer.mjspdf/web/wasm/quickjs-eval.wasm +1 more	-
LOW	`postinstall persistence mechanism`	114	google/elms/elm_sn.jsgoogle/elms/elm_xh.jsgoogle/elms/elm_ps.js +111 more	-
LOW	`credential env files`	4	popup/popup.jscontent/display/display.jsoffscreen/offscreen.js +1 more	-
LOW	`WarpStrings`	1	google/lans/lan_cy.js	-
LOW	`postinstall file download`	198	background/background.jsgoogle/elms/elm_cs.js_locales/zh_CN/messages.json +195 more	-
LOW	`NoUseWeakRandom`	108	google/elms/elm_si.jsgoogle/elms/elm_ky.jsgoogle/elms/elm_la.js +105 more	-
LOW	`NoUseEval`	103	google/elms/elm_ps.jsgoogle/elms/elm_ny.jsgoogle/elms/elm_nl.js +100 more	-
LOW	`postinstall obfuscation`	4	google/element_main.jsgoogle/elms/elm_fr.jsgoogle/elms/elm_sv.js +1 more	-
LOW	`postinstall system command`	163	google/elms/elm_el.jsgoogle/lans/lan_ceb.jsgoogle/lans/lan_nl.js +160 more	-
LOW	`postinstall crypto operations`	9	google/lans/lan_fr.jsocr/core/tesseract-core-lstm.jsgoogle/element_main.js +6 more	-
LOW	`OriginsNotVerified`	3	ocr/worker.jsoffscreen/offscreen.jspopup/popup.js	-
LOW	`postinstall file manipulation`	3	content/pdf.jsgoogle/elms/elm_az.jsgoogle/elms/elm_su.js	-
LOW	`postinstall network communication`	125	google/elms/elm_jw.jsgoogle/elms/elm_ht.jsgoogle/elms/elm_mk.js +122 more	-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

526 total

...

Network indicators are queued for lazy loading

Scroll this section into view to load the detailed rows.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

Noisy-finding weight

x1.00

Publisher domain

No domain

Missing

Store verification signal

Limited signal

Limited

Extension portfolio

Portfolio

12 evidence rows available.

Finding Categories

103

Malware Signatures

Obfuscation

Network

526

IoC Indicators

YARA Rules Matched

15 rules(944 hits)

supply chain sourcemap appended iife LocalStorageShouldNotBeUsed DebuggerStatementsShouldNotBeUsed postinstall persistence mechanism credential env files WarpStrings postinstall file download NoUseWeakRandom NoUseEval postinstall obfuscation postinstall system command postinstall crypto operations OriginsNotVerified postinstall file manipulation postinstall network communication

Requested Permissions

9 permissions

<all_urls>

Access and modify data on every website you visit

Dangerous

tabs

Medium

notifications

Low

contextMenus

Low

storage

Low

declarativeNetRequest

Low

scripting

Low

tts

Low

offscreen

Low

Security Analysis Summary

Security Analysis Overview

Edge Translate - Browser Translator | PDF Translation | MV3 | Open Source is a Chrome Web Store extension published by [email protected]. Version 3.2.5 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 1875 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

High: 144 finding(s)
Medium: 541 finding(s)
Low: 1190 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Edge Translate - Browser Translator | PDF Translation | MV3 | Open Source is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 244 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Chrome version history

Risk trend by version

4 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected

100

Change since first

+27

Change from previous

+27

Versions:

First analyzed version

3.2.0

May 26, 2026

Risk range

73 to 100

Across analyzed versions

Latest analyzed version

3.2.5

Sep 10, 2026

Selected version

critical

Version

v3.2.5

1 weeks ago

Risk score

100

Findings

1878

Change vs previous

+27

Pick any point on the chart to explore that version's code below.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

About This Extension

Edge Translate is an in-browser translation extension that helps users quickly understand foreign-language content while reading web pages and PDFs. It supports selected-text translation, input translation, web page translation, screenshot OCR translation, PDF content translation, and text-to-speech, and it can display a pinnable, resizable translation panel on the current page. Users can configure the source language, target language, default translation engine, keyboard shortcuts, and site blacklist to make translation better fit everyday reading, study, and work. https://github.com/three-water666/EdgeTranslate

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

webcode bridge

[email protected]

MEDIUM 187 users

OneLook

[email protected]

MINIMAL 9 users

Edge Translate - Text Selection Translation

[email protected]

CRITICAL 1K users

Citrix Workspace

[email protected]

CRITICAL

Intelbras Cloud

[email protected]

CRITICAL 20K users

SlingPlayer for DISH Anywhere

Unknown Developer

CRITICAL 10K users

Edge Translate - Browser Translator | PDF Translation | MV3 | Open Source

Analysis record

Evidence ledger

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_be.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_zh-CN.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_sd.js-184

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_ru.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_hmn.js-179

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_th.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_mn.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_mk.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_sr.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_ko.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_bn.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_km.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_si.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_te.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_mr.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_ps.js-179

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_ky.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_lo.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_sm.js-179

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_kk.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_am.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_yi.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_hi.js-180

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_tg.js-178

OBFUSCATION-UNICODE_HEAVY-google/elms/elm_ml.js-178

YARA Rule Matches

Network Indicators

Publisher Evidence

Finding Categories

YARA Rules Matched

Requested Permissions

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

Risk trend by version

About This Extension

Frequently Asked Questions

Similar Extensions

webcode bridge

OneLook

Edge Translate - Text Selection Translation

Citrix Workspace

Intelbras Cloud

SlingPlayer for DISH Anywhere