Is Bilibili 字幕下载（Subtitle Download） safe to use?

Bilibili 字幕下载（Subtitle Download） has a security risk score of 62.77/100 (MEDIUM risk). Our security analysis detected 130 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Bilibili 字幕下载（Subtitle Download）?

Based on our automated security analysis, Bilibili 字幕下载（Subtitle Download） presents medium risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "Bilibili 字幕下载（Subtitle Download）" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.0.0

【Bilibili 字幕下载】是下载 Bilibili 视频字幕最简单的工具，助您轻松获取视频字幕内容。 **主要功能：** - 🚀 **一键下载**：快速提取 Bilibili 视频中的 CC 字幕。 - 📄 **SRT 格式**：自动转换为标准的 SRT 格式，兼容主流播放器（如 VLC, IINA, PotPlayer 等）。 - 🔒 **隐私安全**：所有处理在本地完成，不收集任何用户数据。 - 🆓 **无需注册**：安装插件后即可直接使用，无需登录。 **使用方法：** 1. 打开任意 Bilibili 视频播放页面。 2. 点击浏览器工具栏右上角的 SmartSub 图标。 3. 选择您需要的字幕语言轨道。 4. 点击“下载”按钮即可保存 SRT 文件。 **即将推出：** - AI 智能字幕翻译。 - 视频内容一键总结。 - 更多导出选项支持。

Risk Assessment

Analyzed

62.77

out of 100

MEDIUM

130 security findings detected across all analyzers

Chrome extension requesting 8 permissions

Severity Breakdown

Critical

High

106

Medium

Low

Info

Finding Categories

Network

103

IoC Indicators

YARA Rules Matched

8 rules(24 hits)

postinstall file manipulation postinstall network communication postinstall system command postinstall obfuscation postinstall file download postinstall environment access postinstall crypto operations AlertStatementsShouldNotBeUsed

Requested Permissions

8 permissions

<all_urls>

Access and modify data on every website you visit

Dangerous

webRequest

Intercept, modify, and block all network requests

High

downloads

Manage, modify, and monitor downloads

High

activeTab

Medium

storage

Low

tabCapture

Low

offscreen

Low

scripting

Low

About This Extension

Detailed Findings

26 total

YARA Rule Matches

8 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

IP Addresses

Domains

Strings

103

All Indicators · 103

Domain

detected Domain: chrome.storage

XIOC detected Domain: chrome.storage

extracted_from_files

Domain

detected Domain: b.ping

XIOC detected Domain: b.ping

extracted_from_files

Domain

detected Domain: r.data

XIOC detected Domain: r.data

extracted_from_files

Domain

detected Domain: o.events

XIOC detected Domain: o.events

extracted_from_files

Domain

detected Domain: n.to

XIOC detected Domain: n.to

extracted_from_files

Domain

detected Domain: chromewebstore.google.com

XIOC detected Domain: chromewebstore.google.com

extracted_from_files

Domain

detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

detected IP: ea::

XIOC detected IP: ea::

extracted_from_files

detected IP: ::

XIOC detected IP: ::

extracted_from_files

detected IP: ::bac

XIOC detected IP: ::bac

extracted_from_files

URL

detected URL: http://

XIOC detected URL: http://

extracted_from_files

URL

detected URL: https://vuejs.org/error-reference/#runtime-$

XIOC detected URL: https://vuejs.org/error-reference/#runtime-$

extracted_from_files

URL

detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

URL

detected URL: http://www.w3.org/1999/xlink

XIOC detected URL: http://www.w3.org/1999/xlink

extracted_from_files

URL

detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

Domain

detected Domain: 5.nf

XIOC detected Domain: 5.nf

extracted_from_files

Domain

detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain

detected Domain: bilibili.com

XIOC detected Domain: bilibili.com

extracted_from_files

URL

detected URL: https://chromewebstore.google.com/detail/obmibbhpojkacafjikfeoabfghncibmd

XIOC detected URL: https://chromewebstore.google.com/detail/obmibbhpojkacafjikfeoabfghncibmd

extracted_from_files

URL

detected URL: https://api.bilibili.com/x/web-interface/view?bvid=$

XIOC detected URL: https://api.bilibili.com/x/web-interface/view?bvid=$

extracted_from_files

URL

detected URL: https://api.bilibili.com/x/player/v2?cid=$

XIOC detected URL: https://api.bilibili.com/x/player/v2?cid=$

extracted_from_files

Domain

detected Domain: s.style

XIOC detected Domain: s.style

extracted_from_files

Domain

detected Domain: e.scope.off

XIOC detected Domain: e.scope.off

extracted_from_files

Domain

detected Domain: oe.scope.off

XIOC detected Domain: oe.scope.off

extracted_from_files

Domain

detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain

detected Domain: c.entries.map

XIOC detected Domain: c.entries.map

extracted_from_files

Domain

detected Domain: n.youtube

XIOC detected Domain: n.youtube

extracted_from_files

Domain

detected Domain: n.netflix

XIOC detected Domain: n.netflix

extracted_from_files

Domain

detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain

detected Domain: b.next

XIOC detected Domain: b.next

extracted_from_files

Domain

detected Domain: f.scope.off

XIOC detected Domain: f.scope.off

extracted_from_files

Domain

detected Domain: f.next

XIOC detected Domain: f.next

extracted_from_files

Domain

detected Domain: f.suspense.next

XIOC detected Domain: f.suspense.next

extracted_from_files

Domain

detected Domain: t.style

XIOC detected Domain: t.style

extracted_from_files

Domain

detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain

detected Domain: e.exposed

XIOC detected Domain: e.exposed

extracted_from_files

Domain

detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain

detected Domain: i.app

XIOC detected Domain: i.app

extracted_from_files

Domain

detected Domain: d.call

XIOC detected Domain: d.call

extracted_from_files

Domain

detected Domain: m.name

XIOC detected Domain: m.name

extracted_from_files

Domain

detected Domain: o.is

XIOC detected Domain: o.is

extracted_from_files

Domain

detected Domain: c.style

XIOC detected Domain: c.style

extracted_from_files

Domain

detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain

detected Domain: t.call

XIOC detected Domain: t.call

extracted_from_files

Domain

detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain

detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain

detected Domain: n.id

XIOC detected Domain: n.id

extracted_from_files

Domain

detected Domain: n.name

XIOC detected Domain: n.name

extracted_from_files

Domain

detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain

detected Domain: r.call

XIOC detected Domain: r.call

extracted_from_files

Domain

detected Domain: has.call

XIOC detected Domain: has.call

extracted_from_files

Domain

detected Domain: l.call

XIOC detected Domain: l.call

extracted_from_files

Domain

detected Domain: o.call

XIOC detected Domain: o.call

extracted_from_files

Domain

detected Domain: u.run

XIOC detected Domain: u.run

extracted_from_files

Domain

detected Domain: object.prototype.propertyisenumerable.call

XIOC detected Domain: object.prototype.propertyisenumerable.call

extracted_from_files

Domain

detected Domain: l.ec

XIOC detected Domain: l.ec

extracted_from_files

Domain

detected Domain: e.dep.sc

XIOC detected Domain: e.dep.sc

extracted_from_files

Domain

detected Domain: r.map

XIOC detected Domain: r.map

extracted_from_files

Domain

detected Domain: e.map

XIOC detected Domain: e.map

extracted_from_files

Domain

detected Domain: r.next

XIOC detected Domain: r.next

extracted_from_files

Domain

detected Domain: n.call

XIOC detected Domain: n.call

extracted_from_files

Domain

detected Domain: c.call

XIOC detected Domain: c.call

extracted_from_files

Domain

detected Domain: d.next

XIOC detected Domain: d.next

extracted_from_files

Domain

detected Domain: this.run

XIOC detected Domain: this.run

extracted_from_files

Domain

detected Domain: e.next

XIOC detected Domain: e.next

extracted_from_files

Domain

detected Domain: t.next

XIOC detected Domain: t.next

extracted_from_files

Domain

detected Domain: n.sc

XIOC detected Domain: n.sc

extracted_from_files

Domain

detected Domain: n.map

XIOC detected Domain: n.map

extracted_from_files

Domain

detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain

detected Domain: this.sc

XIOC detected Domain: this.sc

extracted_from_files

Domain

detected Domain: r.ai

XIOC detected Domain: r.ai

extracted_from_files

Domain

detected Domain: r.ping

XIOC detected Domain: r.ping

extracted_from_files

Domain

detected Domain: vuejs.org

XIOC detected Domain: vuejs.org

extracted_from_files

Domain

detected Domain: ui.call

XIOC detected Domain: ui.call

extracted_from_files

Domain

detected Domain: xs.call

XIOC detected Domain: xs.call

extracted_from_files

Domain

detected Domain: object.is

XIOC detected Domain: object.is

extracted_from_files

Domain

detected Domain: this.next

XIOC detected Domain: this.next

extracted_from_files

Domain

detected Domain: e.subtitles.map

XIOC detected Domain: e.subtitles.map

extracted_from_files

Domain

detected Domain: e.style

XIOC detected Domain: e.style

extracted_from_files

Domain

detected Domain: e.tab

XIOC detected Domain: e.tab

extracted_from_files

Domain

detected Domain: e.tab.id

XIOC detected Domain: e.tab.id

extracted_from_files

Domain

detected Domain: o.map

XIOC detected Domain: o.map

extracted_from_files

Domain

detected Domain: performance.now

XIOC detected Domain: performance.now

extracted_from_files

Domain

detected Domain: r.download

XIOC detected Domain: r.download

extracted_from_files

Domain

detected Domain: s.id

XIOC detected Domain: s.id

extracted_from_files

Domain

detected Domain: o.id

XIOC detected Domain: o.id

extracted_from_files

Domain

detected Domain: o.ai

XIOC detected Domain: o.ai

extracted_from_files

Domain

detected Domain: o.name

XIOC detected Domain: o.name

extracted_from_files

Domain

detected Domain: s.name

XIOC detected Domain: s.name

extracted_from_files

Domain

detected Domain: f.youtube

XIOC detected Domain: f.youtube

extracted_from_files

Domain

detected Domain: i.name

XIOC detected Domain: i.name

extracted_from_files

Domain

detected Domain: e.value.map

XIOC detected Domain: e.value.map

extracted_from_files

Domain

detected Domain: b.id

XIOC detected Domain: b.id

extracted_from_files

Domain

detected Domain: api.bilibili.com

XIOC detected Domain: api.bilibili.com

extracted_from_files

Domain

detected Domain: a.id

XIOC detected Domain: a.id

extracted_from_files

Domain

detected Domain: a.ai

XIOC detected Domain: a.ai

extracted_from_files

Domain

detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain

detected Domain: i.data

XIOC detected Domain: i.data

extracted_from_files

Domain

detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain

detected Domain: chrome.downloads.download

XIOC detected Domain: chrome.downloads.download

extracted_from_files

Domain

detected Domain: g.youtube

XIOC detected Domain: g.youtube

extracted_from_files

Domain

detected Domain: g.netflix

XIOC detected Domain: g.netflix

extracted_from_files

Domain

detected Domain: t.target

XIOC detected Domain: t.target

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Bilibili 字幕下载（Subtitle Download） is a Chrome Web Store extension published by [email protected]. Version 1.0.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 62.77/100 (MEDIUM risk) based on 130 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

Medium: 106 finding(s)
Low: 24 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Bilibili 字幕下载（Subtitle Download） is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 651 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

GlowWord－網頁生詞高亮單詞本

[email protected]

CRITICAL 20 users

Wizju IPTV Player

[email protected]

HIGH 387 users

Research Notes

[email protected]

CRITICAL 2K users

RoTrade - Roblox Trading Automated

[email protected]

CRITICAL 95 users

PubMed Citation Bar

[email protected]

CRITICAL 545 users

Cover-Letter-AI

[email protected]

CRITICAL

Is "Bilibili 字幕下载（Subtitle Download）" on Chrome Web Store Safe to Install?

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

Requested Permissions

About This Extension

Detailed Findings

NET-FETCH-assets/index.ts-CKmLhOHu.js-1

NET-FETCH-assets/index.html-Cjlz8cIr.js-16

YARA Rule Matches

postinstall file manipulation

postinstall network communication

postinstall system command

postinstall obfuscation

postinstall file download

postinstall environment access

postinstall crypto operations

AlertStatementsShouldNotBeUsed

Indicators of Compromise

All Indicators · 103

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

Frequently Asked Questions

Similar Extensions

GlowWord－網頁生詞高亮單詞本

Wizju IPTV Player

Research Notes

RoTrade - Roblox Trading Automated

PubMed Citation Bar

Cover-Letter-AI