Is "Substack Downloader – Video, Audio & Podcast MP4/MP3" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.1.3

Substack Downloader is a fast, lightweight Chrome extension that lets you download Substack videos, audio posts, and podcasts directly to your device in MP4 and MP3 format. Built specifically for Substack, it ensures accurate detection and reliable downloads from video posts, audio newsletters, and podcast episodes — including premium content you already have access to. Unlike generic video downloader tools, Substack Downloader is engineered exclusively for the Substack platform. It works seamlessly with embedded Mux video streams, native Substack audio players, and dynamically loaded media across all Substack publications, including custom domains. 🚀 Key Features: 🎥 Download Substack Videos (MP4) • Download embedded Substack videos hosted on Mux • Save videos as standard, playable MP4 files • Supports high-quality downloads up to 1080p (Pro) 🔊 Download Substack Audio & Podcasts (MP3) • Download Substack audio posts and podcast episodes • Save audio as MP3 for offline listening • Fully compatible with native Substack audio players ☁️ Cloud Sync & Backup (Optional) • Connect Google Drive or Dropbox • Automatically upload downloaded files to the cloud • Keep your Substack media library backed up and accessible anywhere 🧠 Smart Substack Media Detection • Automatically detects video and audio players on Substack pages • Works with hidden players, lazy-loaded media, and deep-linked audio • Compatible with all Substack publications and custom Substack domains 📂 Batch Downloads for Substack Posts • Download all videos and audio from a page at once • View detected Substack media in the extension popup • Ideal for long newsletters, archives, and research workflows 📝 Advanced File Organization • Automatically name files using post titles • Organize downloads by publication name, year, or month • Custom file naming and folder structure support 🔐 100% Private & Local • Runs entirely inside your browser • No servers, no analytics, no tracking • No ads and no external services required • Your data and downloads stay on your device ⚡ How to Use Substack Downloader Method 1: Download from the Player 1. Open any Substack post with video or audio 2. Hover over the media player 3. Click the download button to save instantly Method 2: Batch Download 1. Click the extension icon in your browser toolbar 2. View all detected Substack videos and audio on the page 3. Click "Download All" to save everything at once 🔎 Supported Substack Downloads • Download Substack videos • Download Substack audio posts • Download Substack podcasts • Download Substack Mux video streams • Offline access to Substack media • Works on substack.com and custom Substack domains Substack Downloader is designed for readers, researchers, and creators who want offline access to Substack content they already have permission to view. Simple, reliable, and built exclusively for Substack.

Risk Assessment

Analyzed
100
out of 100
CRITICAL

300 security findings detected across all analyzers

Chrome extension requesting 10 permissions

Severity Breakdown

1
Critical
4
High
115
Medium
180
Low
0
Info

Finding Categories

5
Obfuscation
15
Network
100
IoC Indicators

YARA Rules Matched

7 rules(180 hits)
postinstall network communication postinstall file download postinstall system command postinstall crypto operations postinstall file manipulation postinstall persistence mechanism NoUseWeakRandom

Requested Permissions

10 permissions
downloads

Manage, modify, and monitor downloads

High
identity

Access your identity and sign-in tokens

High
activeTab
Medium
storage
Low
https://oztqexvwivgwakgavzoa.supabase.co/*
Low
https://www.googleapis.com/*
Low
https://content.dropboxapi.com/*
Low
https://api.dropboxapi.com/*
Low
*://*.substack.com/*
Low
https://*.substack-post-media.s3.amazonaws.com/*
Low

About This Extension

Substack Downloader is a fast, lightweight Chrome extension that lets you download Substack videos, audio posts, and podcasts directly to your device in MP4 and MP3 format. Built specifically for Substack, it ensures accurate detection and reliable downloads from video posts, audio newsletters, and podcast episodes — including premium content you already have access to. Unlike generic video downloader tools, Substack Downloader is engineered exclusively for the Substack platform. It works seamlessly with embedded Mux video streams, native Substack audio players, and dynamically loaded media across all Substack publications, including custom domains. 🚀 Key Features: 🎥 Download Substack Videos (MP4) • Download embedded Substack videos hosted on Mux • Save videos as standard, playable MP4 files • Supports high-quality downloads up to 1080p (Pro) 🔊 Download Substack Audio & Podcasts (MP3) • Download Substack audio posts and podcast episodes • Save audio as MP3 for offline listening • Fully compatible with native Substack audio players ☁️ Cloud Sync & Backup (Optional) • Connect Google Drive or Dropbox • Automatically upload downloaded files to the cloud • Keep your Substack media library backed up and accessible anywhere 🧠 Smart Substack Media Detection • Automatically detects video and audio players on Substack pages • Works with hidden players, lazy-loaded media, and deep-linked audio • Compatible with all Substack publications and custom Substack domains 📂 Batch Downloads for Substack Posts • Download all videos and audio from a page at once • View detected Substack media in the extension popup • Ideal for long newsletters, archives, and research workflows 📝 Advanced File Organization • Automatically name files using post titles • Organize downloads by publication name, year, or month • Custom file naming and folder structure support 🔐 100% Private & Local • Runs entirely inside your browser • No servers, no analytics, no tracking • No ads and no external services required • Your data and downloads stay on your device ⚡ How to Use Substack Downloader Method 1: Download from the Player 1. Open any Substack post with video or audio 2. Hover over the media player 3. Click the download button to save instantly Method 2: Batch Download 1. Click the extension icon in your browser toolbar 2. View all detected Substack videos and audio on the page 3. Click "Download All" to save everything at once 🔎 Supported Substack Downloads • Download Substack videos • Download Substack audio posts • Download Substack podcasts • Download Substack Mux video streams • Offline access to Substack media • Works on substack.com and custom Substack domains Substack Downloader is designed for readers, researchers, and creators who want offline access to Substack content they already have permission to view. Simple, reliable, and built exclusively for Substack.

Detailed Findings

200 total

YARA Rule Matches

7 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
31
IP Addresses
13
Domains
66
Strings
100

All Indicators · 100

Domain
detected Domain: video.id

XIOC detected Domain: video.id

extracted_from_files

Domain
detected Domain: ss-direct-download-btn.audio

XIOC detected Domain: ss-direct-download-btn.audio

extracted_from_files

Domain
detected Domain: keys.cloud

XIOC detected Domain: keys.cloud

extracted_from_files

Domain
detected Domain: downloaddelta.id

XIOC detected Domain: downloaddelta.id

extracted_from_files

Domain
detected Domain: chrome.downloads.show

XIOC detected Domain: chrome.downloads.show

extracted_from_files

Domain
detected Domain: message.data

XIOC detected Domain: message.data

extracted_from_files

Domain
detected Domain: chrome.downloads.download

XIOC detected Domain: chrome.downloads.download

extracted_from_files

IP
detected IP: ed::bef

XIOC detected IP: ed::bef

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

Domain
detected Domain: detectedmedia.map

XIOC detected Domain: detectedmedia.map

extracted_from_files

Domain
detected Domain: types.audio

XIOC detected Domain: types.audio

extracted_from_files

Domain
detected Domain: types.video

XIOC detected Domain: types.video

extracted_from_files

Domain
detected Domain: item.id

XIOC detected Domain: item.id

extracted_from_files

Domain
detected Domain: audio.id

XIOC detected Domain: audio.id

extracted_from_files

IP
detected IP: d::bef

XIOC detected IP: d::bef

extracted_from_files

URL
detected URL: https://substack.com/api/v1';

XIOC detected URL: https://substack.com/api/v1';

extracted_from_files

URL
detected URL: https://substack.com/$

XIOC detected URL: https://substack.com/$

extracted_from_files

URL
detected URL: https://oztqexvwivgwakgavzoa.supabase.co';

XIOC detected URL: https://oztqexvwivgwakgavzoa.supabase.co';

extracted_from_files

URL
detected URL: https://stream.mux.com/$

XIOC detected URL: https://stream.mux.com/$

extracted_from_files

URL
detected URL: https://www.buymeacoffee.com/';

XIOC detected URL: https://www.buymeacoffee.com/';

extracted_from_files

URL
detected URL: https://buy.stripe.com/4gMeVdfMG8kF97zbUN7Zu03';

XIOC detected URL: https://buy.stripe.com/4gMeVdfMG8kF97zbUN7Zu03';

extracted_from_files

URL
detected URL: https://buy.stripe.com/eVq14n43Y9oJ2Jb3oh7Zu04';

XIOC detected URL: https://buy.stripe.com/eVq14n43Y9oJ2Jb3oh7Zu04';

extracted_from_files

URL
detected URL: https://billing.stripe.com/p/login/6oUeVd7ga58t6Zr1g97Zu00';

XIOC detected URL: https://billing.stripe.com/p/login/6oUeVd7ga58t6Zr1g97Zu00';

extracted_from_files

URL
detected URL: https://www.googleapis.com/drive/v3/files',

XIOC detected URL: https://www.googleapis.com/drive/v3/files',

extracted_from_files

Domain
detected Domain: paginateditems.map

XIOC detected Domain: paginateditems.map

extracted_from_files

URL
detected URL: https://content.dropboxapi.com/2/files/upload',

XIOC detected URL: https://content.dropboxapi.com/2/files/upload',

extracted_from_files

URL
detected URL: https://content.dropboxapi.com/2/files/upload_session/start',

XIOC detected URL: https://content.dropboxapi.com/2/files/upload_session/start',

extracted_from_files

URL
detected URL: https://content.dropboxapi.com/2/files/upload_session/finish',

XIOC detected URL: https://content.dropboxapi.com/2/files/upload_session/finish',

extracted_from_files

URL
detected URL: https://content.dropboxapi.com/2/files/upload_session/append_v2',

XIOC detected URL: https://content.dropboxapi.com/2/files/upload_session/append_v2',

extracted_from_files

URL
detected URL: https://substack.com$

XIOC detected URL: https://substack.com$

extracted_from_files

URL
detected URL: https://iina.io/

XIOC detected URL: https://iina.io/

extracted_from_files

URL
detected URL: https://chromewebstore.google.com/publisher/neo-cortex-llc/u796c2dce8d71eb1062cca209ec50db80

XIOC detected URL: https://chromewebstore.google.com/publisher/neo-cortex-llc/u796c2dce8d71eb1062cca209ec50db80

extracted_from_files

URL
detected URL: https://chromewebstore.google.com/detail/substack-downloader-%E2%80%93-vid/ciplbnnhcnnbihlmohbkncnpbanfoodg/reviews

XIOC detected URL: https://chromewebstore.google.com/detail/substack-downloader-%E2%80%93-vid/ciplbnnhcnnbihlmohbkncnpbanfoodg/reviews

extracted_from_files

URL
detected URL: https://www.buymeacoffee.com/neocortex

XIOC detected URL: https://www.buymeacoffee.com/neocortex

extracted_from_files

URL
detected URL: https://cdn.buymeacoffee.com/buttons/v2/default-violet.png

XIOC detected URL: https://cdn.buymeacoffee.com/buttons/v2/default-violet.png

extracted_from_files

URL
detected URL: https://www.googleapis.com/upload/drive/v3/files?uploadType=multipart',

XIOC detected URL: https://www.googleapis.com/upload/drive/v3/files?uploadType=multipart',

extracted_from_files

URL
detected URL: https://www.googleapis.com/drive/v3/files?q=$

XIOC detected URL: https://www.googleapis.com/drive/v3/files?q=$

extracted_from_files

URL
detected URL: https://oztqexvwivgwakgavzoa.supabase.co/*

XIOC detected URL: https://oztqexvwivgwakgavzoa.supabase.co/*

extracted_from_files

URL
detected URL: https://www.googleapis.com/*

XIOC detected URL: https://www.googleapis.com/*

extracted_from_files

URL
detected URL: https://content.dropboxapi.com/*

XIOC detected URL: https://content.dropboxapi.com/*

extracted_from_files

URL
detected URL: https://api.dropboxapi.com/*

XIOC detected URL: https://api.dropboxapi.com/*

extracted_from_files

URL
detected URL: https://*.substack-post-media.s3.amazonaws.com/*

XIOC detected URL: https://*.substack-post-media.s3.amazonaws.com/*

extracted_from_files

URL
detected URL: https://www.googleapis.com/auth/drive.file

XIOC detected URL: https://www.googleapis.com/auth/drive.file

extracted_from_files

URL
detected URL: https://www.videolan.org/

XIOC detected URL: https://www.videolan.org/

extracted_from_files

Domain
detected Domain: themes.auto

XIOC detected Domain: themes.auto

extracted_from_files

Domain
detected Domain: keys.auto

XIOC detected Domain: keys.auto

extracted_from_files

Domain
detected Domain: history.map

XIOC detected Domain: history.map

extracted_from_files

Domain
detected Domain: entries.map

XIOC detected Domain: entries.map

extracted_from_files

Domain
detected Domain: 1.mp

XIOC detected Domain: 1.mp

extracted_from_files

URL
detected URL: http://iptc.org/std/Iptc4xmpExt/2008-02-29/

XIOC detected URL: http://iptc.org/std/Iptc4xmpExt/2008-02-29/

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

Domain
detected Domain: keys.is

XIOC detected Domain: keys.is

extracted_from_files

Domain
detected Domain: stream.mux.com

XIOC detected Domain: stream.mux.com

extracted_from_files

Domain
detected Domain: high.mp

XIOC detected Domain: high.mp

extracted_from_files

Domain
detected Domain: medium.mp

XIOC detected Domain: medium.mp

extracted_from_files

Domain
detected Domain: low.mp

XIOC detected Domain: low.mp

extracted_from_files

IP
detected Domain: buy.stripe.com

XIOC detected Domain: buy.stripe.com

extracted_from_files

IP
detected Domain: billing.stripe.com

XIOC detected Domain: billing.stripe.com

extracted_from_files

Domain
detected Domain: videoinfo.id

XIOC detected Domain: videoinfo.id

extracted_from_files

Domain
detected Domain: data.name

XIOC detected Domain: data.name

extracted_from_files

Domain
detected Domain: data.author

XIOC detected Domain: data.author

extracted_from_files

Domain
detected Domain: metadata.author

XIOC detected Domain: metadata.author

extracted_from_files

Domain
detected Domain: data.author.name

XIOC detected Domain: data.author.name

extracted_from_files

Domain
detected Domain: pagemetadata.author

XIOC detected Domain: pagemetadata.author

extracted_from_files

Domain
detected Domain: downloads.map

XIOC detected Domain: downloads.map

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain
detected Domain: filtered.map

XIOC detected Domain: filtered.map

extracted_from_files

Domain
detected Domain: www.dropbox.com

XIOC detected Domain: www.dropbox.com

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: result.name

XIOC detected Domain: result.name

extracted_from_files

Domain
detected Domain: result.id

XIOC detected Domain: result.id

extracted_from_files

Domain
detected Domain: data.id

XIOC detected Domain: data.id

extracted_from_files

Domain
detected Domain: keys.date

XIOC detected Domain: keys.date

extracted_from_files

Domain
detected Domain: keys.pro

XIOC detected Domain: keys.pro

extracted_from_files

Domain
detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

URL
detected URL: https://www.dropbox.com/oauth2/authorize?client_id=$

XIOC detected URL: https://www.dropbox.com/oauth2/authorize?client_id=$

extracted_from_files

Domain
detected Domain: dataset.id

XIOC detected Domain: dataset.id

extracted_from_files

Domain
detected Domain: interview-with-founder.mp

XIOC detected Domain: interview-with-founder.mp

extracted_from_files

Domain
detected Domain: chromewebstore.google.com

XIOC detected Domain: chromewebstore.google.com

extracted_from_files

Domain
detected Domain: www.buymeacoffee.com

XIOC detected Domain: www.buymeacoffee.com

extracted_from_files

Domain
detected Domain: cdn.buymeacoffee.com

XIOC detected Domain: cdn.buymeacoffee.com

extracted_from_files

Domain
detected Domain: window.location.search

XIOC detected Domain: window.location.search

extracted_from_files

Domain
detected Domain: tabbtn.click

XIOC detected Domain: tabbtn.click

extracted_from_files

Domain
detected Domain: accounttab.click

XIOC detected Domain: accounttab.click

extracted_from_files

Domain
detected Domain: btn.dataset.tab

XIOC detected Domain: btn.dataset.tab

extracted_from_files

Domain
detected Domain: api.dropboxapi.com

XIOC detected Domain: api.dropboxapi.com

extracted_from_files

Domain
detected Domain: substack-post-media.s3.amazonaws.com

XIOC detected Domain: substack-post-media.s3.amazonaws.com

extracted_from_files

Domain
detected Domain: 869550188885-29cvn01305bq77rf17ak51bg3r8efmpd.apps.googleusercontent.com

XIOC detected Domain: 869550188885-29cvn01305bq77rf17ak51bg3r8efmpd.apps.googleusercontent.com

extracted_from_files

Domain
detected Domain: li.limited

XIOC detected Domain: li.limited

extracted_from_files

Domain
detected Domain: www.videolan.org

XIOC detected Domain: www.videolan.org

extracted_from_files

Domain
detected Domain: iina.io

XIOC detected Domain: iina.io

extracted_from_files

Domain
detected Domain: post-title.mp

XIOC detected Domain: post-title.mp

extracted_from_files

Domain
detected Domain: itemstodownload.map

XIOC detected Domain: itemstodownload.map

extracted_from_files

Domain
detected Domain: m.id

XIOC detected Domain: m.id

extracted_from_files

Domain
detected Domain: ns.adobe.com

XIOC detected Domain: ns.adobe.com

extracted_from_files

IP
detected Domain: iptc.org

XIOC detected Domain: iptc.org

extracted_from_files

IP
detected Domain: cv.iptc.org

XIOC detected Domain: cv.iptc.org

extracted_from_files

Domain
detected Domain: oztqexvwivgwakgavzoa.supabase.co

XIOC detected Domain: oztqexvwivgwakgavzoa.supabase.co

extracted_from_files

Domain
detected Domain: content.dropboxapi.com

XIOC detected Domain: content.dropboxapi.com

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Substack Downloader – Video, Audio & Podcast MP4/MP3 is a Chrome Web Store extension published by [email protected]. Version 1.1.3 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 300 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • Critical: 1 finding(s)
  • High: 4 finding(s)
  • Medium: 115 finding(s)
  • Low: 180 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Substack Downloader – Video, Audio & Podcast MP4/MP3 is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 969 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions