Firefox Add-ons Verified

Privacy Badger

by EFF Technologists · 1.9M users · 4.8 rating
558af8bd-1a14-5771-97a8-38069c7183bd | v2026.9.15
64/ 100
MEDIUM risk
-7 since v2026.8.7
Analyst verdict
Review before use

The AI review rates the findings as likely false positive, but the risk score (64/100) still counts them.

Analysis record

Analysed
2 weeks ago
Version
v2026.9.15
Artifact
SHA256 97C…D62
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

12 detail rows

Publisher Evidence

Limited evidence

EFF Technologists

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Firefox does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

58
Noisy-finding weight
x1.00
Publisher domain
eff.org
Observed
Store verification signal
Limited signal
Limited
Extension portfolio
2
Portfolio

13 evidence rows available.

Finding Categories

1
Obfuscation
9
Network

Requested Permissions

398 permissions
<all_urls>

Access and modify data on every website you visit

Dangerous
webRequest

Intercept, modify, and block all network requests

High
webRequestBlocking

Block network requests before they complete

High
tabs
Medium
alarms
Low
privacy
Low
scripting
Low
storage
Low
webNavigation
Low
https://*.facebook.com/*
Low
http://*.facebook.com/*
Low
https://*.messenger.com/*
Low
http://*.messenger.com/*
Low
*://*.facebookcorewwwi.onion/*
Low
https://docs.google.com/*
Low
http://docs.google.com/*
Low
https://mail.google.com/*
Low
http://mail.google.com/*
Low
https://www.google.com/*
Low
http://www.google.com/*
Low
https://www.google.ad/*
Low
http://www.google.ad/*
Low
https://www.google.ae/*
Low
http://www.google.ae/*
Low
https://www.google.com.af/*
Low
http://www.google.com.af/*
Low
https://www.google.com.ag/*
Low
http://www.google.com.ag/*
Low
https://www.google.com.ai/*
Low
http://www.google.com.ai/*
Low
https://www.google.al/*
Low
http://www.google.al/*
Low
https://www.google.am/*
Low
http://www.google.am/*
Low
https://www.google.co.ao/*
Low
http://www.google.co.ao/*
Low
https://www.google.com.ar/*
Low
http://www.google.com.ar/*
Low
https://www.google.as/*
Low
http://www.google.as/*
Low
https://www.google.at/*
Low
http://www.google.at/*
Low
https://www.google.com.au/*
Low
http://www.google.com.au/*
Low
https://www.google.az/*
Low
http://www.google.az/*
Low
https://www.google.ba/*
Low
http://www.google.ba/*
Low
https://www.google.com.bd/*
Low
http://www.google.com.bd/*
Low
https://www.google.be/*
Low
http://www.google.be/*
Low
https://www.google.bf/*
Low
http://www.google.bf/*
Low
https://www.google.bg/*
Low
http://www.google.bg/*
Low
https://www.google.com.bh/*
Low
http://www.google.com.bh/*
Low
https://www.google.bi/*
Low
http://www.google.bi/*
Low
https://www.google.bj/*
Low
http://www.google.bj/*
Low
https://www.google.com.bn/*
Low
http://www.google.com.bn/*
Low
https://www.google.com.bo/*
Low
http://www.google.com.bo/*
Low
https://www.google.com.br/*
Low
http://www.google.com.br/*
Low
https://www.google.bs/*
Low
http://www.google.bs/*
Low
https://www.google.bt/*
Low
http://www.google.bt/*
Low
https://www.google.co.bw/*
Low
http://www.google.co.bw/*
Low
https://www.google.by/*
Low
http://www.google.by/*
Low
https://www.google.com.bz/*
Low
http://www.google.com.bz/*
Low
https://www.google.ca/*
Low
http://www.google.ca/*
Low
https://www.google.cd/*
Low
http://www.google.cd/*
Low
https://www.google.cf/*
Low
http://www.google.cf/*
Low
https://www.google.cg/*
Low
http://www.google.cg/*
Low
https://www.google.ch/*
Low
http://www.google.ch/*
Low
https://www.google.ci/*
Low
http://www.google.ci/*
Low
https://www.google.co.ck/*
Low
http://www.google.co.ck/*
Low
https://www.google.cl/*
Low
http://www.google.cl/*
Low
https://www.google.cm/*
Low
http://www.google.cm/*
Low
https://www.google.cn/*
Low
http://www.google.cn/*
Low
https://www.google.com.co/*
Low
http://www.google.com.co/*
Low
https://www.google.co.cr/*
Low
http://www.google.co.cr/*
Low
https://www.google.com.cu/*
Low
http://www.google.com.cu/*
Low
https://www.google.cv/*
Low
http://www.google.cv/*
Low
https://www.google.com.cy/*
Low
http://www.google.com.cy/*
Low
https://www.google.cz/*
Low
http://www.google.cz/*
Low
https://www.google.de/*
Low
http://www.google.de/*
Low
https://www.google.dj/*
Low
http://www.google.dj/*
Low
https://www.google.dk/*
Low
http://www.google.dk/*
Low
https://www.google.dm/*
Low
http://www.google.dm/*
Low
https://www.google.com.do/*
Low
http://www.google.com.do/*
Low
https://www.google.dz/*
Low
http://www.google.dz/*
Low
https://www.google.com.ec/*
Low
http://www.google.com.ec/*
Low
https://www.google.ee/*
Low
http://www.google.ee/*
Low
https://www.google.com.eg/*
Low
http://www.google.com.eg/*
Low
https://www.google.es/*
Low
http://www.google.es/*
Low
https://www.google.com.et/*
Low
http://www.google.com.et/*
Low
https://www.google.fi/*
Low
http://www.google.fi/*
Low
https://www.google.com.fj/*
Low
http://www.google.com.fj/*
Low
https://www.google.fm/*
Low
http://www.google.fm/*
Low
https://www.google.fr/*
Low
http://www.google.fr/*
Low
https://www.google.ga/*
Low
http://www.google.ga/*
Low
https://www.google.ge/*
Low
http://www.google.ge/*
Low
https://www.google.gg/*
Low
http://www.google.gg/*
Low
https://www.google.com.gh/*
Low
http://www.google.com.gh/*
Low
https://www.google.com.gi/*
Low
http://www.google.com.gi/*
Low
https://www.google.gl/*
Low
http://www.google.gl/*
Low
https://www.google.gm/*
Low
http://www.google.gm/*
Low
https://www.google.gr/*
Low
http://www.google.gr/*
Low
https://www.google.com.gt/*
Low
http://www.google.com.gt/*
Low
https://www.google.gy/*
Low
http://www.google.gy/*
Low
https://www.google.com.hk/*
Low
http://www.google.com.hk/*
Low
https://www.google.hn/*
Low
http://www.google.hn/*
Low
https://www.google.hr/*
Low
http://www.google.hr/*
Low
https://www.google.ht/*
Low
http://www.google.ht/*
Low
https://www.google.hu/*
Low
http://www.google.hu/*
Low
https://www.google.co.id/*
Low
http://www.google.co.id/*
Low
https://www.google.ie/*
Low
http://www.google.ie/*
Low
https://www.google.co.il/*
Low
http://www.google.co.il/*
Low
https://www.google.im/*
Low
http://www.google.im/*
Low
https://www.google.co.in/*
Low
http://www.google.co.in/*
Low
https://www.google.iq/*
Low
http://www.google.iq/*
Low
https://www.google.is/*
Low
http://www.google.is/*
Low
https://www.google.it/*
Low
http://www.google.it/*
Low
https://www.google.je/*
Low
http://www.google.je/*
Low
https://www.google.com.jm/*
Low
http://www.google.com.jm/*
Low
https://www.google.jo/*
Low
http://www.google.jo/*
Low
https://www.google.co.jp/*
Low
http://www.google.co.jp/*
Low
https://www.google.co.ke/*
Low
http://www.google.co.ke/*
Low
https://www.google.com.kh/*
Low
http://www.google.com.kh/*
Low
https://www.google.ki/*
Low
http://www.google.ki/*
Low
https://www.google.kg/*
Low
http://www.google.kg/*
Low
https://www.google.co.kr/*
Low
http://www.google.co.kr/*
Low
https://www.google.com.kw/*
Low
http://www.google.com.kw/*
Low
https://www.google.kz/*
Low
http://www.google.kz/*
Low
https://www.google.la/*
Low
http://www.google.la/*
Low
https://www.google.com.lb/*
Low
http://www.google.com.lb/*
Low
https://www.google.li/*
Low
http://www.google.li/*
Low
https://www.google.lk/*
Low
http://www.google.lk/*
Low
https://www.google.co.ls/*
Low
http://www.google.co.ls/*
Low
https://www.google.lt/*
Low
http://www.google.lt/*
Low
https://www.google.lu/*
Low
http://www.google.lu/*
Low
https://www.google.lv/*
Low
http://www.google.lv/*
Low
https://www.google.com.ly/*
Low
http://www.google.com.ly/*
Low
https://www.google.co.ma/*
Low
http://www.google.co.ma/*
Low
https://www.google.md/*
Low
http://www.google.md/*
Low
https://www.google.me/*
Low
http://www.google.me/*
Low
https://www.google.mg/*
Low
http://www.google.mg/*
Low
https://www.google.mk/*
Low
http://www.google.mk/*
Low
https://www.google.ml/*
Low
http://www.google.ml/*
Low
https://www.google.com.mm/*
Low
http://www.google.com.mm/*
Low
https://www.google.mn/*
Low
http://www.google.mn/*
Low
https://www.google.ms/*
Low
http://www.google.ms/*
Low
https://www.google.com.mt/*
Low
http://www.google.com.mt/*
Low
https://www.google.mu/*
Low
http://www.google.mu/*
Low
https://www.google.mv/*
Low
http://www.google.mv/*
Low
https://www.google.mw/*
Low
http://www.google.mw/*
Low
https://www.google.com.mx/*
Low
http://www.google.com.mx/*
Low
https://www.google.com.my/*
Low
http://www.google.com.my/*
Low
https://www.google.co.mz/*
Low
http://www.google.co.mz/*
Low
https://www.google.com.na/*
Low
http://www.google.com.na/*
Low
https://www.google.com.ng/*
Low
http://www.google.com.ng/*
Low
https://www.google.com.ni/*
Low
http://www.google.com.ni/*
Low
https://www.google.ne/*
Low
http://www.google.ne/*
Low
https://www.google.nl/*
Low
http://www.google.nl/*
Low
https://www.google.no/*
Low
http://www.google.no/*
Low
https://www.google.com.np/*
Low
http://www.google.com.np/*
Low
https://www.google.nr/*
Low
http://www.google.nr/*
Low
https://www.google.nu/*
Low
http://www.google.nu/*
Low
https://www.google.co.nz/*
Low
http://www.google.co.nz/*
Low
https://www.google.com.om/*
Low
http://www.google.com.om/*
Low
https://www.google.com.pa/*
Low
http://www.google.com.pa/*
Low
https://www.google.com.pe/*
Low
http://www.google.com.pe/*
Low
https://www.google.com.pg/*
Low
http://www.google.com.pg/*
Low
https://www.google.com.ph/*
Low
http://www.google.com.ph/*
Low
https://www.google.com.pk/*
Low
http://www.google.com.pk/*
Low
https://www.google.pl/*
Low
http://www.google.pl/*
Low
https://www.google.pn/*
Low
http://www.google.pn/*
Low
https://www.google.com.pr/*
Low
http://www.google.com.pr/*
Low
https://www.google.ps/*
Low
http://www.google.ps/*
Low
https://www.google.pt/*
Low
http://www.google.pt/*
Low
https://www.google.com.py/*
Low
http://www.google.com.py/*
Low
https://www.google.com.qa/*
Low
http://www.google.com.qa/*
Low
https://www.google.ro/*
Low
http://www.google.ro/*
Low
https://www.google.ru/*
Low
http://www.google.ru/*
Low
https://www.google.rw/*
Low
http://www.google.rw/*
Low
https://www.google.com.sa/*
Low
http://www.google.com.sa/*
Low
https://www.google.com.sb/*
Low
http://www.google.com.sb/*
Low
https://www.google.sc/*
Low
http://www.google.sc/*
Low
https://www.google.se/*
Low
http://www.google.se/*
Low
https://www.google.com.sg/*
Low
http://www.google.com.sg/*
Low
https://www.google.sh/*
Low
http://www.google.sh/*
Low
https://www.google.si/*
Low
http://www.google.si/*
Low
https://www.google.sk/*
Low
http://www.google.sk/*
Low
https://www.google.com.sl/*
Low
http://www.google.com.sl/*
Low
https://www.google.sn/*
Low
http://www.google.sn/*
Low
https://www.google.so/*
Low
http://www.google.so/*
Low
https://www.google.sm/*
Low
http://www.google.sm/*
Low
https://www.google.sr/*
Low
http://www.google.sr/*
Low
https://www.google.st/*
Low
http://www.google.st/*
Low
https://www.google.com.sv/*
Low
http://www.google.com.sv/*
Low
https://www.google.td/*
Low
http://www.google.td/*
Low
https://www.google.tg/*
Low
http://www.google.tg/*
Low
https://www.google.co.th/*
Low
http://www.google.co.th/*
Low
https://www.google.com.tj/*
Low
http://www.google.com.tj/*
Low
https://www.google.tl/*
Low
http://www.google.tl/*
Low
https://www.google.tm/*
Low
http://www.google.tm/*
Low
https://www.google.tn/*
Low
http://www.google.tn/*
Low
https://www.google.to/*
Low
http://www.google.to/*
Low
https://www.google.com.tr/*
Low
http://www.google.com.tr/*
Low
https://www.google.tt/*
Low
http://www.google.tt/*
Low
https://www.google.com.tw/*
Low
http://www.google.com.tw/*
Low
https://www.google.co.tz/*
Low
http://www.google.co.tz/*
Low
https://www.google.com.ua/*
Low
http://www.google.com.ua/*
Low
https://www.google.co.ug/*
Low
http://www.google.co.ug/*
Low
https://www.google.co.uk/*
Low
http://www.google.co.uk/*
Low
https://www.google.com.uy/*
Low
http://www.google.com.uy/*
Low
https://www.google.co.uz/*
Low
http://www.google.co.uz/*
Low
https://www.google.com.vc/*
Low
http://www.google.com.vc/*
Low
https://www.google.co.ve/*
Low
http://www.google.co.ve/*
Low
https://www.google.vg/*
Low
http://www.google.vg/*
Low
https://www.google.co.vi/*
Low
http://www.google.co.vi/*
Low
https://www.google.com.vn/*
Low
http://www.google.com.vn/*
Low
https://www.google.vu/*
Low
http://www.google.vu/*
Low
https://www.google.ws/*
Low
http://www.google.ws/*
Low
https://www.google.rs/*
Low
http://www.google.rs/*
Low
https://www.google.co.za/*
Low
http://www.google.co.za/*
Low
https://www.google.co.zm/*
Low
http://www.google.co.zm/*
Low
https://www.google.co.zw/*
Low
http://www.google.co.zw/*
Low
https://www.google.cat/*
Low
http://www.google.cat/*
Low

AI Security Report

AI Security Review

Evidence context: threat category none; evidence quality moderate.

The Privacy Badger extension, developed by the Electronic Frontier Foundation (EFF), is designed to block hidden trackers. The findings indicate that the extension has a number of network calls, including fetch and jquery_ajax calls, which are detected in various files such as js/popup.js, js/background.js, and lib/vendor/jquery-ui.custom/jquery-ui.js. However, these calls are likely related to the extension's functionality and do not appear to be malicious. The extension also has a number of code-smell findings, but these are likely due to the use of common JavaScript libraries and do not indicate any malicious activity. The strongest counterargument to this verdict would be that the extension's network calls could potentially be used for malicious purposes. However, given the extension's purpose and the fact that it is developed by a reputable organization, it is unlikely that these calls are being used for malicious purposes. Overall, the evidence suggests that the extension is likely a false positive, and its functionality is consistent with its intended purpose of blocking hidden trackers. The extension's developer, the EFF, is a well-known and reputable organization, which further supports the conclusion that the extension is not malicious. The network calls detected in the extension are likely necessary for its functionality and do not pose a significant risk to users. In conclusion, based on the findings, it appears that the Privacy Badger extension is a legitimate tool for blocking hidden trackers and is not malicious.

Key Reasons

  • network calls are likely related to the extension's functionality
  • code-smell findings are likely due to common JavaScript libraries
  • developer is a reputable organization

False Positive Considerations

  • code-smell findings
  • network calls

Reviewed 2026-05-23; recommended action: no action; model confidence 80%.

Firefox version history

Risk trend by version

5 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected
64
Change since first
+1
Change from previous
-7
Versions:
First analyzed version
2025.12.9
Jan 18, 2026
Risk range
63 to 71
Across analyzed versions
Latest analyzed version
2026.9.15
Sep 15, 2026
Selected version
medium
Version
v2026.9.15
2 weeks ago
Risk score
64
Findings
12
Change vs previous
-7

Pick any point on the chart to explore that version's code below.

About This Extension

Privacy Badger automatically learns to block hidden trackers. Privacy Badger is made by the leading digital rights nonprofit <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/9144ba0b8683350d3a2319a21ffa6d1c1d548dfeb00e555a9b9a4f06a4edbc2c/https%3A//www.eff.org/" rel="nofollow">EFF</a> to stop companies from spying on you. Privacy Badger sends the <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/f5433e6e384e33b2921d74ea02a8ada23fd2a7a9e1dd4c0382bc0cbb9dbc0864/https%3A//globalprivacycontrol.org/" rel="nofollow">Global Privacy Control</a> signal to opt you out of data sharing and selling, and the <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/9945620a688bfc1f32e4ecd44d4e6d6006bfb763b04c194293b87fa00acc9446/https%3A//www.eff.org/issues/do-not-track" rel="nofollow">Do Not Track</a> signal to tell companies not to track you. If trackers ignore these signals, Privacy Badger will learn to block them. Besides automatic tracker blocking, Privacy Badger replaces potentially useful trackers (video players, comments widgets, etc.) with <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/d251224d95f8c4faa65d78095099c96f2367879089807236dbfdd6f4cb03504a/https%3A//privacybadger.org/%23How-does-Privacy-Badger-handle-social-media-widgets" rel="nofollow">click-to-activate placeholders</a>, and removes outgoing link click tracking on <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/74bc8198d1396c6b1a333f38763229b5199c5f5e0220c6814bafe0ee27045f20/https%3A//www.eff.org/deeplinks/2018/05/privacy-badger-rolls-out-new-ways-fight-facebook-tracking" rel="nofollow">Facebook</a> and <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/91c6a37074848da9be49ac657dd8a9847d2cdc3e26faae187b8e6829ef186cca/https%3A//www.eff.org/deeplinks/2018/10/privacy-badger-now-fights-more-sneaky-google-tracking" rel="nofollow">Google</a>, with more privacy protections on the way. To learn more, see <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/8dd76a580489fb9c5fee04be1f174e70c4bc96206b4a1d1b756da4ef2a42553d/https%3A//privacybadger.org/%23faq" rel="nofollow">the FAQ on Privacy Badger's homepage</a>.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

VaultysHub extension

Vaultys

CRITICAL 1 users

Kindredly - A safer, private web for families

Kindredly.ai

CRITICAL 5 users

Malwarebytes Browser Guard

Malwarebytes

CRITICAL 451K users

VHS - Dev Tools

Vihat Software

CRITICAL 1 users

Ultimate New Tab Page - AI Search & Dial

Dracon

CRITICAL

General Sticker System (GSS)

ElfinL

CRITICAL 32 users