Is Beform - Auto Form Filler safe to use?

Beform - Auto Form Filler has a security risk score of 56.26/100 (MEDIUM risk). Our security analysis detected 192 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Beform - Auto Form Filler?

Based on our automated security analysis, Beform - Auto Form Filler presents medium risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "Beform - Auto Form Filler" on Chrome Web Store Safe to Install?

[email protected] · chrome · v2.3

Beform – Smart Auto Form Filler with Multiple Profile Manager & Fake Profile Filler. Say goodbye to repetitive typing! Beform automatically detects, saves, and fills form fields across any website — so you can focus on your tasks, not on re-entering the same details over and over again. Whether you’re managing multiple accounts, testing websites, or just want to save time — Beform does the work for you with one simple click. ⚡ Why You’ll Love Beform Smart Auto-Detection: Instantly captures and remembers form fields as you type — no setup needed. One-Click Fill: Auto-fill entire forms with your own profile or fake profile in seconds with accurate field mapping. Multi-Profile Management: Create separate profiles for work, personal use, or clients — and switch instantly. Interactive Editing: Edit, update, or delete saved fields right inside the extension. Cloud Sync (Google Sign-In): Securely back up and restore your data across devices. Dark & Light Themes: A clean, modern interface that matches your style. Backup & Restore: Export or import all your Beform data in a single click. Smart Storage Info: Monitor storage usage and clean redundant data easily. 🧠 Advanced Features Optional Notifications: Get form-fill or sync status updates in real time. Secure Local Storage: Your data stays on your device — never tracked or shared. Unlimited Data: Save as many profiles and fields as you like with unlimitedStorage. Custom Profile Colors: Personalize profiles with unique colors and names for quick recognition. 💼 Perfect For Professionals managing multiple online accounts QA testers and developers automating web forms Freelancers and marketers filling lead forms daily Anyone who values time, privacy, and productivity 🔒 Privacy First Beform stores all your data locally or in your Google account (if you choose to sync). No hidden tracking. No background monitoring. You stay in control. ❤️ Built With Passion Beform is independently developed to make your everyday browsing more efficient. If you love Beform, please consider rating it ⭐️ or supporting future updates — it really helps! 🚀 Experience effortless automation. Install Beform today and let your browser work for you!

Risk Assessment

Analyzed

56.26

out of 100

MEDIUM

192 security findings detected across all analyzers

Chrome extension requesting 7 permissions

Severity Breakdown

Critical

High

159

Medium

Low

Info

Finding Categories

Malware Signatures

Network

153

IoC Indicators

YARA Rules Matched

9 rules(33 hits)

postinstall file manipulation postinstall system command postinstall network communication postinstall persistence mechanism postinstall obfuscation NoUseWeakRandom postinstall file download postinstall environment access postinstall crypto operations

Requested Permissions

7 permissions

<all_urls>

Access and modify data on every website you visit

Dangerous

identity

Access your identity and sign-in tokens

High

activeTab

Medium

storage

Low

unlimitedStorage

Low

scripting

Low

contextMenus

Low

About This Extension

Detailed Findings

39 total

YARA Rule Matches

9 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

IP Addresses

Domains

104

Strings

153

All Indicators · 153

Domain

detected Domain: 3g.lk

XIOC detected Domain: 3g.lk

extracted_from_files

Domain

detected Domain: 2.ar

XIOC detected Domain: 2.ar

extracted_from_files

URL

detected URL: https://www.googleapis.com/drive/v3/files/$

XIOC detected URL: https://www.googleapis.com/drive/v3/files/$

extracted_from_files

URL

detected URL: https://www.googleapis.com/drive/v3/files?q=name='beform_data.json'

XIOC detected URL: https://www.googleapis.com/drive/v3/files?q=name='beform_data.json'

extracted_from_files

URL

detected URL: https://example.com

XIOC detected URL: https://example.com

extracted_from_files

Hash

detected MD5 Hash: 5D20892493BFDB11914A8590D31508C8

XIOC detected MD5 Hash: 5D20892493BFDB11914A8590D31508C8

extracted_from_files

URL

detected URL: http://ns.adobe.com/xap/1.0/g/

XIOC detected URL: http://ns.adobe.com/xap/1.0/g/

extracted_from_files

URL

detected URL: http://ns.adobe.com/xmp/1.0/DynamicMedia/

XIOC detected URL: http://ns.adobe.com/xmp/1.0/DynamicMedia/

extracted_from_files

URL

detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL

detected URL: https://www.googleapis.com/auth/drive.appdata

XIOC detected URL: https://www.googleapis.com/auth/drive.appdata

extracted_from_files

URL

detected URL: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css

XIOC detected URL: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css

extracted_from_files

URL

detected URL: https://johndoe.com',

XIOC detected URL: https://johndoe.com',

extracted_from_files

URL

detected URL: https://sudosoft.netlify.app/'

XIOC detected URL: https://sudosoft.netlify.app/'

extracted_from_files

URL

detected URL: http://purl.org/dc/elements/1.1/

XIOC detected URL: http://purl.org/dc/elements/1.1/

extracted_from_files

URL

detected URL: http://ns.adobe.com/xap/1.0/

XIOC detected URL: http://ns.adobe.com/xap/1.0/

extracted_from_files

URL

detected URL: http://ns.adobe.com/illustrator/1.0/

XIOC detected URL: http://ns.adobe.com/illustrator/1.0/

extracted_from_files

URL

detected URL: http://ns.adobe.com/xap/1.0/t/pg/

XIOC detected URL: http://ns.adobe.com/xap/1.0/t/pg/

extracted_from_files

URL

detected URL: http://ns.adobe.com/pdf/1.3/

XIOC detected URL: http://ns.adobe.com/pdf/1.3/

extracted_from_files

URL

detected URL: http://ns.adobe.com/xap/1.0/g/img/

XIOC detected URL: http://ns.adobe.com/xap/1.0/g/img/

extracted_from_files

URL

detected URL: http://ns.adobe.com/xap/1.0/sType/Dimensions#

XIOC detected URL: http://ns.adobe.com/xap/1.0/sType/Dimensions#

extracted_from_files

URL

detected URL: https://www.googleapis.com/drive/v3/files',

XIOC detected URL: https://www.googleapis.com/drive/v3/files',

extracted_from_files

URL

detected URL: https://www.googleapis.com/upload/drive/v3/files/$

XIOC detected URL: https://www.googleapis.com/upload/drive/v3/files/$

extracted_from_files

URL

detected URL: https://example$

XIOC detected URL: https://example$

extracted_from_files

URL

detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

XIOC detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

extracted_from_files

URL

detected URL: http://ns.adobe.com/xap/1.0/mm/

XIOC detected URL: http://ns.adobe.com/xap/1.0/mm/

extracted_from_files

URL

detected URL: http://ns.adobe.com/xap/1.0/sType/ResourceEvent#

XIOC detected URL: http://ns.adobe.com/xap/1.0/sType/ResourceEvent#

extracted_from_files

URL

detected URL: http://ns.adobe.com/xap/1.0/sType/ResourceRef#

XIOC detected URL: http://ns.adobe.com/xap/1.0/sType/ResourceRef#

extracted_from_files

Domain

detected Domain: overlay.id

XIOC detected Domain: overlay.id

extracted_from_files

detected Domain: tooltipdiv.style.top

XIOC detected Domain: tooltipdiv.style.top

extracted_from_files

Domain

detected Domain: rect.top

XIOC detected Domain: rect.top

extracted_from_files

Other

detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

URL

detected URL: https://www.googleapis.com/auth/drive.appdata)

XIOC detected URL: https://www.googleapis.com/auth/drive.appdata)

extracted_from_files

URL

detected URL: https://chrome.google.com/webstore',

XIOC detected URL: https://chrome.google.com/webstore',

extracted_from_files

URL

detected URL: https://chromewebstore.google.com'

XIOC detected URL: https://chromewebstore.google.com'

extracted_from_files

Domain

detected Domain: div.style

XIOC detected Domain: div.style

extracted_from_files

Domain

detected Domain: johndoe.com

XIOC detected Domain: johndoe.com

extracted_from_files

Domain

detected Domain: profile.name

XIOC detected Domain: profile.name

extracted_from_files

Domain

detected Domain: ignored.map

XIOC detected Domain: ignored.map

extracted_from_files

Domain

detected Domain: btn.dataset.site

XIOC detected Domain: btn.dataset.site

extracted_from_files

Domain

detected Domain: gemini.google.com

XIOC detected Domain: gemini.google.com

extracted_from_files

Domain

detected Domain: step.target

XIOC detected Domain: step.target

extracted_from_files

Domain

detected Domain: cdnjs.cloudflare.com

XIOC detected Domain: cdnjs.cloudflare.com

extracted_from_files

Domain

detected Domain: sudosoft.netlify.app

XIOC detected Domain: sudosoft.netlify.app

extracted_from_files

Domain

detected Domain: accounts.google.com

XIOC detected Domain: accounts.google.com

extracted_from_files

Domain

detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain

detected Domain: fielddata.name

XIOC detected Domain: fielddata.name

extracted_from_files

Domain

detected Domain: this.elements.importallfile.click

XIOC detected Domain: this.elements.importallfile.click

extracted_from_files

Domain

detected Domain: a.click

XIOC detected Domain: a.click

extracted_from_files

Domain

detected Domain: 9h.mm

XIOC detected Domain: 9h.mm

extracted_from_files

Domain

detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain

detected Domain: 356869969211-c5i0idaaja0n6lhcu3fmmnq4qi5jf4qr.apps.googleusercontent.com

XIOC detected Domain: 356869969211-c5i0idaaja0n6lhcu3fmmnq4qi5jf4qr.apps.googleusercontent.com

extracted_from_files

Domain

detected Domain: toggle-indicator.off

XIOC detected Domain: toggle-indicator.off

extracted_from_files

Domain

detected Domain: donation-section.show

XIOC detected Domain: donation-section.show

extracted_from_files

Domain

detected Domain: usage-guide.show

XIOC detected Domain: usage-guide.show

extracted_from_files

Domain

detected Domain: bottom-actions.show

XIOC detected Domain: bottom-actions.show

extracted_from_files

Domain

detected Domain: v.gs

XIOC detected Domain: v.gs

extracted_from_files

Domain

detected Domain: k.ng

XIOC detected Domain: k.ng

extracted_from_files

Domain

detected Domain: a.as

XIOC detected Domain: a.as

extracted_from_files

Domain

detected Domain: 4.si

XIOC detected Domain: 4.si

extracted_from_files

Domain

detected Domain: w.fo

XIOC detected Domain: w.fo

extracted_from_files

Domain

detected Domain: vר.co

XIOC detected Domain: vר.co

extracted_from_files

Domain

detected Domain: n.sv

XIOC detected Domain: n.sv

extracted_from_files

Domain

detected Domain: db.dz

XIOC detected Domain: db.dz

extracted_from_files

Domain

detected Domain: e.se

XIOC detected Domain: e.se

extracted_from_files

Domain

detected Domain: 0yr.es

XIOC detected Domain: 0yr.es

extracted_from_files

Domain

detected Domain: o.mn

XIOC detected Domain: o.mn

extracted_from_files

Domain

detected Domain: fmυa.ai

XIOC detected Domain: fmυa.ai

extracted_from_files

Domain

detected Domain: r.ar

XIOC detected Domain: r.ar

extracted_from_files

Domain

detected Domain: y.tv

XIOC detected Domain: y.tv

extracted_from_files

Domain

detected Domain: ȃ.hu

XIOC detected Domain: ȃ.hu

extracted_from_files

Domain

detected Domain: h.kz

XIOC detected Domain: h.kz

extracted_from_files

Domain

detected Domain: 8.cu

XIOC detected Domain: 8.cu

extracted_from_files

Domain

detected Domain: gs.gt

XIOC detected Domain: gs.gt

extracted_from_files

Hash

detected MD5 Hash: 65E6390686CF11DBA6E2D887CEACB407

XIOC detected MD5 Hash: 65E6390686CF11DBA6E2D887CEACB407

extracted_from_files

URL

detected URL: https://chromewebstore.google.com/detail/obamiledmoddmjgcenohkbbgemkoepib?utm_source=item-share-cb';

XIOC detected URL: https://chromewebstore.google.com/detail/obamiledmoddmjgcenohkbbgemkoepib?utm_source=item-share-cb';

extracted_from_files

Hash

detected MD5 Hash: 2256219D045411EB8C98C90E7D920236

XIOC detected MD5 Hash: 2256219D045411EB8C98C90E7D920236

extracted_from_files

Domain

detected Domain: xj.pa

XIOC detected Domain: xj.pa

extracted_from_files

detected IP: ::

XIOC detected IP: ::

extracted_from_files

URL

detected URL: https://accounts.google.com/o/oauth2/auth?client_id=$

XIOC detected URL: https://accounts.google.com/o/oauth2/auth?client_id=$

extracted_from_files

Domain

detected Domain: 1.gg

XIOC detected Domain: 1.gg

extracted_from_files

Domain

detected Domain: if.ro

XIOC detected Domain: if.ro

extracted_from_files

Domain

detected Domain: k.tm

XIOC detected Domain: k.tm

extracted_from_files

Domain

detected Domain: u.je

XIOC detected Domain: u.je

extracted_from_files

Domain

detected Domain: k.je

XIOC detected Domain: k.je

extracted_from_files

Domain

detected Domain: m.ro

XIOC detected Domain: m.ro

extracted_from_files

Domain

detected Domain: nl.dm

XIOC detected Domain: nl.dm

extracted_from_files

Domain

detected Domain: mmt.uk

XIOC detected Domain: mmt.uk

extracted_from_files

Domain

detected Domain: 4f.kg

XIOC detected Domain: 4f.kg

extracted_from_files

Domain

detected Domain: e.cc

XIOC detected Domain: e.cc

extracted_from_files

Domain

detected Domain: 0.kw

XIOC detected Domain: 0.kw

extracted_from_files

Domain

detected Domain: ə.er

XIOC detected Domain: ə.er

extracted_from_files

Domain

detected Domain: c.qa

XIOC detected Domain: c.qa

extracted_from_files

Domain

detected Domain: a.cy

XIOC detected Domain: a.cy

extracted_from_files

Domain

detected Domain: j.au

XIOC detected Domain: j.au

extracted_from_files

Domain

detected Domain: l.cl

XIOC detected Domain: l.cl

extracted_from_files

Domain

detected Domain: f7.er

XIOC detected Domain: f7.er

extracted_from_files

Domain

detected Domain: t.ec

XIOC detected Domain: t.ec

extracted_from_files

Domain

detected Domain: attributes.id

XIOC detected Domain: attributes.id

extracted_from_files

Domain

detected Domain: event.target

XIOC detected Domain: event.target

extracted_from_files

Domain

detected Domain: example.com

XIOC detected Domain: example.com

extracted_from_files

Domain

detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain

detected Domain: ns.adobe.com

XIOC detected Domain: ns.adobe.com

extracted_from_files

URL

detected Domain: purl.org

XIOC detected Domain: purl.org

extracted_from_files

Domain

detected Domain: n.tt

XIOC detected Domain: n.tt

extracted_from_files

Domain

detected Domain: perplexity.ai

XIOC detected Domain: perplexity.ai

extracted_from_files

Domain

detected Domain: character.ai

XIOC detected Domain: character.ai

extracted_from_files

Domain

detected Domain: popup.id

XIOC detected Domain: popup.id

extracted_from_files

Domain

detected Domain: input.name

XIOC detected Domain: input.name

extracted_from_files

Domain

detected Domain: input.id

XIOC detected Domain: input.id

extracted_from_files

Domain

detected Domain: fd.name

XIOC detected Domain: fd.name

extracted_from_files

Domain

detected Domain: attributes.name

XIOC detected Domain: attributes.name

extracted_from_files

Domain

detected Domain: whatsapp.com

XIOC detected Domain: whatsapp.com

extracted_from_files

Domain

detected Domain: chatgpt.com

XIOC detected Domain: chatgpt.com

extracted_from_files

Domain

detected Domain: openai.com

XIOC detected Domain: openai.com

extracted_from_files

Domain

detected Domain: claude.ai

XIOC detected Domain: claude.ai

extracted_from_files

Domain

detected Domain: bard.google.com

XIOC detected Domain: bard.google.com

extracted_from_files

Domain

detected Domain: copilot.microsoft.com

XIOC detected Domain: copilot.microsoft.com

extracted_from_files

Domain

detected Domain: m.bz

XIOC detected Domain: m.bz

extracted_from_files

Domain

detected Domain: duckduckgo.com

XIOC detected Domain: duckduckgo.com

extracted_from_files

Domain

detected Domain: facebook.com

XIOC detected Domain: facebook.com

extracted_from_files

Domain

detected Domain: twitter.com

XIOC detected Domain: twitter.com

extracted_from_files

Domain

detected Domain: x.com

XIOC detected Domain: x.com

extracted_from_files

Domain

detected Domain: instagram.com

XIOC detected Domain: instagram.com

extracted_from_files

Domain

detected Domain: reddit.com

XIOC detected Domain: reddit.com

extracted_from_files

Domain

detected Domain: youtube.com

XIOC detected Domain: youtube.com

extracted_from_files

Domain

detected Domain: chromewebstore.google.com

XIOC detected Domain: chromewebstore.google.com

extracted_from_files

Domain

detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain

detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain

detected Domain: file.id

XIOC detected Domain: file.id

extracted_from_files

Domain

detected Domain: docs.google

XIOC detected Domain: docs.google

extracted_from_files

Domain

detected Domain: bing.com

XIOC detected Domain: bing.com

extracted_from_files

Domain

detected Domain: yahoo.com

XIOC detected Domain: yahoo.com

extracted_from_files

detected IP: ::5

XIOC detected IP: ::5

extracted_from_files

detected IP: 8::d

XIOC detected IP: 8::d

extracted_from_files

detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

detected IP: ea::

XIOC detected IP: ea::

extracted_from_files

Domain

detected Domain: www.googleapis.com

XIOC detected Domain: www.googleapis.com

extracted_from_files

Domain

detected Domain: 356869969211-r64somrvoebturpro3aetq0teaqimvul.apps.googleusercontent.com

XIOC detected Domain: 356869969211-r64somrvoebturpro3aetq0teaqimvul.apps.googleusercontent.com

extracted_from_files

Domain

detected Domain: chrome.google.com

XIOC detected Domain: chrome.google.com

extracted_from_files

detected IP: ::1

XIOC detected IP: ::1

extracted_from_files

detected IP: 4::

XIOC detected IP: 4::

extracted_from_files

detected IP: a5::

XIOC detected IP: a5::

extracted_from_files

detected IP: ::8

XIOC detected IP: ::8

extracted_from_files

detected IP: ::e

XIOC detected IP: ::e

extracted_from_files

detected IP: ::3

XIOC detected IP: ::3

extracted_from_files

detected IP: d::

XIOC detected IP: d::

extracted_from_files

URL

detected URL: https://chromewebstore.google.com/detail/obamiledmoddmjgcenohkbbgemkoepib?utm_source=item-share-cb'

XIOC detected URL: https://chromewebstore.google.com/detail/obamiledmoddmjgcenohkbbgemkoepib?utm_source=item-share-cb'

extracted_from_files

Hash

detected MD5 Hash: 2256219C045411EB8C98C90E7D920236

XIOC detected MD5 Hash: 2256219C045411EB8C98C90E7D920236

extracted_from_files

Hash

detected MD5 Hash: 2256219B045411EB8C98C90E7D920236

XIOC detected MD5 Hash: 2256219B045411EB8C98C90E7D920236

extracted_from_files

Hash

detected MD5 Hash: 2256219E045411EB8C98C90E7D920236

XIOC detected MD5 Hash: 2256219E045411EB8C98C90E7D920236

extracted_from_files

Domain

detected Domain: q.kh

XIOC detected Domain: q.kh

extracted_from_files

Domain

detected Domain: 6fd.gg

XIOC detected Domain: 6fd.gg

extracted_from_files

Domain

detected Domain: splash.id

XIOC detected Domain: splash.id

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Beform - Auto Form Filler is a Chrome Web Store extension published by [email protected]. Version 2.3 has been analyzed by the Risky Plugins security platform, receiving a risk score of 56.26/100 (MEDIUM risk) based on 192 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

High: 33 finding(s)
Medium: 159 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Beform - Auto Form Filler is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 5 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Dextab

[email protected]

CRITICAL 4 users

GreasePanda

[email protected]

CRITICAL 1K users

TextEase - Text Shortcuts & Smart AI Prompts Expander

[email protected]

HIGH 11 users

Smart File Organizer

[email protected]

HIGH 59 users

Photos Downloader Pro for Facebook

[email protected]

CRITICAL 458 users

OnHand

[email protected]

CRITICAL 5 users

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

Requested Permissions

About This Extension

Detailed Findings

NET-FETCH-background.js-269

NET-FETCH-popup.js-1297

NET-FETCH-popup.js-1329

NET-FETCH-popup.js-1286

NET-FETCH-background.js-237

NET-FETCH-popup.js-1272

YARA Rule Matches

postinstall file manipulation

postinstall system command

postinstall network communication

postinstall persistence mechanism

postinstall obfuscation

NoUseWeakRandom

postinstall file download

postinstall environment access

postinstall crypto operations

Indicators of Compromise

All Indicators · 153

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

Frequently Asked Questions

Similar Extensions

Dextab

GreasePanda

TextEase - Text Shortcuts & Smart AI Prompts Expander

Smart File Organizer

Photos Downloader Pro for Facebook

OnHand