Is This extension safe to use?

This extension has a security risk score of 83.23/100 (HIGH risk). Our security analysis detected 426 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of This extension?

Based on our automated security analysis, This extension presents high risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Firefox Add-ons

Extension

Name: Unnamed Extension
Availability: InStock
Author: ádfv

by ádfv

547ad47c-aa2d-51a1-9e06-d2708356edaa | v0.3.4

HIGH risk

Risk verdict

Review before use

Score-based assessment (high risk, 83/100). No analyst review available.

Analysis record

Analysed: 2 weeks ago
Version: v0.3.4
Artifact: SHA256 311…9A1
Source: Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

242 detail rows

YARA Rule Matches

18 rules

Severity	Rule	Hits	Files	Metadata
HIGH	`supply chain sourcemap appended iife`	1	script/vs/language/typescript/tsWorker.js	-
LOW	`RedirectToUnknownPath`	1	script/vs/language/typescript/tsWorker.js	-
LOW	`credential env files`	3	script/vs/base/worker/workerMain.jsscript/vs/loader.jsscript/vs/editor/editor.main.js	-
LOW	`postinstall persistence mechanism`	6	script/vs/language/html/htmlMode.jsscript/vs/language/typescript/tsWorker.jsscript/vs/language/html/htmlWorker.js +3 more	-
LOW	`postinstall file manipulation`	40	script/vs/basic-languages/pgsql/pgsql.jsscript/vs/language/html/htmlMode.jsscript/vs/basic-languages/pascaligo/pascaligo.js +37 more	-
LOW	`UsingShellInterpreterWhenExecutingOSCommands`	1	script/vs/language/typescript/tsWorker.js	-
LOW	`postinstall crypto operations`	22	script/vs/basic-languages/sophia/sophia.jsscript/vs/basic-languages/redis/redis.jsscript/vs/basic-languages/sql/sql.js +19 more	-
LOW	`postinstall network communication`	26	script/vs/basic-languages/st/st.jsscript/vs/language/html/htmlMode.jsscript/background.js +23 more	-
LOW	`postinstall registry modification`	14	script/vs/editor/editor.main.nls.de.jsscript/vs/editor/editor.main.nls.ru.jsscript/vs/editor/editor.main.nls.ja.js +11 more	-
LOW	`postinstall obfuscation`	29	script/vs/language/html/htmlMode.jsscript/vs/basic-languages/css/css.jsscript/vs/basic-languages/sql/sql.js +26 more	-
LOW	`postinstall system command`	38	script/vs/language/html/htmlMode.jsscript/vs/editor/editor.main.nls.it.jsscript/vs/editor/editor.main.nls.zh-tw.js +35 more	-
LOW	`OriginsNotVerified`	2	script/vs/base/worker/workerMain.jsscript/vs/editor/editor.main.js	-
LOW	`NoUseEval`	1	script/vs/language/typescript/tsWorker.js	-
LOW	`NoUseWeakRandom`	3	script/vs/editor/editor.main.jsscript/vs/base/worker/workerMain.jsscript/vs/loader.js	-
LOW	`postinstall file download`	38	script/vs/basic-languages/tcl/tcl.jsscript/browser-action.jsscript/background.js +35 more	-
LOW	`credential git credentials`	1	script/vs/editor/editor.main.js	-
LOW	`UntrustedContentShouldNotBeIncluded`	3	script/vs/base/worker/workerMain.jsscript/inject.jsscript/vs/loader.js	-
LOW	`DebuggerStatementsShouldNotBeUsed`	4	script/vs/language/typescript/tsWorker.jsscript/vs/basic-languages/javascript/javascript.jsscript/vs/basic-languages/typescript/typescript.js +1 more	-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

184 total

...

Network indicators are queued for lazy loading

Scroll this section into view to load the detailed rows.

Publisher Evidence

Limited evidence

ádfv

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Firefox does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

Noisy-finding weight

x1.00

Publisher domain

No domain

Missing

Store verification signal

Limited signal

Limited

Extension portfolio

Portfolio

13 evidence rows available.

Finding Categories

Malware Signatures

Obfuscation

Network

184

IoC Indicators

YARA Rules Matched

18 rules(233 hits)

supply chain sourcemap appended iife RedirectToUnknownPath credential env files postinstall persistence mechanism postinstall file manipulation UsingShellInterpreterWhenExecutingOSCommands postinstall crypto operations postinstall network communication postinstall registry modification postinstall obfuscation postinstall system command OriginsNotVerified NoUseEval NoUseWeakRandom postinstall file download credential git credentials +2 more

Requested Permissions

5 permissions

<all_urls>

Access and modify data on every website you visit

Dangerous

tabs

Medium

activeTab

Medium

storage

Low

webNavigation

Low

Security Analysis Summary

Security Analysis Overview

This extension is a Firefox Add-ons extension published by ádfv. Version 0.3.4 has been analyzed by the Risky Plugins security platform, receiving a risk score of 83.23/100 (HIGH risk) based on 426 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

High: 2 finding(s)
Medium: 192 finding(s)
Low: 232 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

This extension is published by ádfv on the Firefox Add-ons marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

VaultysHub extension

Vaultys

CRITICAL 1 users

Kindredly - A safer, private web for families

Kindredly.ai

CRITICAL 5 users

Malwarebytes Browser Guard

Malwarebytes

CRITICAL 451K users

VHS - Dev Tools

Vihat Software

CRITICAL 1 users

Ultimate New Tab Page - AI Search & Dial

Dracon

CRITICAL

General Sticker System (GSS)

ElfinL

CRITICAL 32 users