Is 𝐏ha𝐧†օ𝗺 safe to use?

𝐏ha𝐧†օ𝗺 has a security risk score of 85.54/100 (CRITICAL risk). Our security analysis detected 2729 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of 𝐏ha𝐧†օ𝗺?

Based on our automated security analysis, 𝐏ha𝐧†օ𝗺 presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Firefox Add-ons

𝐏ha𝐧†օ𝗺

Name: 𝐏ha𝐧†օ𝗺
Availability: InStock
Author: 𝐏ha𝐧†օ𝗺

by 𝐏ha𝐧†օ𝗺

fad828ce-a253-5fcb-940b-da4582ff1c57 | v25.6.0

CRITICAL risk

Risk verdict

Do not install

Score-based assessment (critical risk, 86/100). No analyst review available.

Analysis record

Analysed: 2 days ago
Version: v25.6.0
Artifact: SHA256 311…0E9
Source: Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

889 detail rows

Showing 25 of 42 · highest severity first

YARA Rule Matches

20 rules

Severity	Rule	Hits	Files	Metadata
HIGH	`supply chain sourcemap appended iife`	1	background/serviceWorker.js	-
LOW	`LocalStorageShouldNotBeUsed`	4	chunk-U423GKDA.jschunk-ZRGHR2IN.jschunk-XIR76CIH.js +1 more	-
LOW	`DebuggerStatementsShouldNotBeUsed`	2	model-viewer-P5RAWAP4.jschunk-QWIAWEEK.js	-
LOW	`RedirectToUnknownPath`	1	chunk-U423GKDA.js	-
LOW	`postinstall persistence mechanism`	48	locales/pt/translation.jsonlocales/th/translation.jsonchunk-HDXH7L2W.js +45 more	-
LOW	`credential env files`	25	phantom.jschunk-U423GKDA.jschunk-ZRGHR2IN.js +22 more	-
LOW	`postinstall file download`	116	chunk-U76XSPM3.jsExplorePerps-KRZOIMUS.jschunk-JB3GAX54.js +113 more	-
LOW	`NoUseWeakRandom`	28	chunk-YW5L4EXP.jschunk-MENO57CT.jschunk-RVO3HWKX.js +25 more	-
LOW	`HavingAPermissiveCrossOriginResourceSharingPolicy`	2	server.jsserver-review.js	-
LOW	`SQLInjection`	1	chunk-NWGK6ZWZ.js	-
LOW	`NoUseEval`	1	chunk-MENO57CT.js	-
LOW	`postinstall obfuscation`	94	chunk-PSUSOHZ5.jschunk-P4SE33QA.jslocales/fil/translation.json +91 more	-
LOW	`postinstall network communication`	135	wallet.jschunk-U76XSPM3.jslocales/my/translation.json +132 more	-
LOW	`OriginsNotVerified`	4	chunk-HDXH7L2W.jschunk-LFMZHSZK.jschunk-NWGK6ZWZ.js +1 more	-
LOW	`postinstall crypto operations`	86	evmMetamask.jslocales/pt-BR/translation.jsonchunk-3AJAGTMM.js +83 more	-
LOW	`postinstall system command`	94	locales/fil/translation.jsonlocales/zh-CN/translation.jsonchunk-P6PYZNCP.js +91 more	-
LOW	`CAP HookExKeylogger`	1	CLAUDE.md	-
LOW	`postinstall registry modification`	22	solana.jsevmProvider.jschunk-HDXH7L2W.js +19 more	-
LOW	`postinstall environment access`	66	PortfolioHomeTabPage-35KPOD3V.jschunk-CJZDT2ZK.jschunk-P4SE33QA.js +63 more	-
LOW	`postinstall file manipulation`	116	chunk-YPU7HXDW.jslocales/fil/translation.jsonlocales/zh-CN/translation.json +113 more	-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

1,840 total

Loading network indicators

IoC detail rows are loaded outside the initial page render.

Publisher Evidence

Limited evidence

𝐏ha𝐧†օ𝗺

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Firefox does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

Noisy-finding weight

x1.00

Publisher domain

No domain

Missing

Store verification signal

Limited signal

Limited

Extension portfolio

Portfolio

13 evidence rows available.

Finding Categories

Malware Signatures

Obfuscation

Network

1,840

IoC Indicators

YARA Rules Matched

20 rules(847 hits)

supply chain sourcemap appended iife LocalStorageShouldNotBeUsed DebuggerStatementsShouldNotBeUsed RedirectToUnknownPath postinstall persistence mechanism credential env files postinstall file download NoUseWeakRandom HavingAPermissiveCrossOriginResourceSharingPolicy SQLInjection NoUseEval postinstall obfuscation postinstall network communication OriginsNotVerified postinstall crypto operations postinstall system command +4 more

Requested Permissions

11 permissions

file://*/*

Dangerous

http://*/*

Dangerous

https://*/*

Dangerous

identity

Access your identity and sign-in tokens

High

webRequest

Intercept, modify, and block all network requests

High

activeTab

Medium

tabs

Medium

alarms

Low

storage

Low

scripting

Low

unlimitedStorage

Low

Security Analysis Summary

Security Analysis Overview

𝐏ha𝐧†օ𝗺 is a Firefox Add-ons extension published by 𝐏ha𝐧†օ𝗺. Version 25.6.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 85.54/100 (CRITICAL risk) based on 2729 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

High: 9 finding(s)
Medium: 1874 finding(s)
Low: 846 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

𝐏ha𝐧†օ𝗺 is published by 𝐏ha𝐧†օ𝗺 on the Firefox Add-ons marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

About This Extension

OFFICIAL PHANTOM WALLET (Firefox Update) Phantom is your trusted companion for web3. Our multichain wallet helps you explore web3, use apps, and buy, store, and trade crypto and NFTs across Solana, Ethereum, and Polygon. It’s easy, safe, and fun. For everyone. Keeps everything in one place <code>Use multiple chains with one wallet. No manually switching networks. Seamlessly access the largest NFT marketplaces. View and showcase your NFT collection. Monitor all activity with detailed transaction history and notifications. No limits on tokens, balances, or transactions. </code> Powerful tools made for everyone <code>Do more with your NFTs – pin, hide, burn and list all from within your wallet. Swap tokens super fast and at low fees. Store, stake, and earn rewards with your tokens. Easily list your NFTs on NFT marketplaces directly from Phantom. Purchase crypto from over 7 sources including card and bank transfer. </code> Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Wallet Phantom Phantom Phantom Phantom Phantom Phantom Phantom Phantom Phantom Phantom Phantom Phantom Phantom Phantom Phantom Phantom Phantom

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Falcon Secure Access Extension - Connect

Seraphic Algorithms

CRITICAL 18 users

VHS - Dev Tools

Vihat Software

CRITICAL 1 users

℘hanŧom 𝕎a❘let

dcs

CRITICAL

VIUko

E-Media Arts

CRITICAL 1 users

BriefFeed: AI Summaries for Social Feeds

BriefFeed

CRITICAL

Smart Video Controls

Divyam Rastogi

CRITICAL

𝐏ha𝐧†օ𝗺

Analysis record

Evidence ledger

OBFUSCATION-UNICODE_HEAVY-chunk-2RTOGRMN.js-1

OBFUSCATION-INVISIBLE_ZERO_WIDTH-locales/ar/translation.json-0

OBFUSCATION-UNICODE_HEAVY-chunk-FWN6253K.js-122

OBFUSCATION-INVISIBLE_ZERO_WIDTH-locales/te/translation.json-0

OBFUSCATION-INVISIBLE_ZERO_WIDTH-locales/bn/translation.json-0

OBFUSCATION-UNICODE_HEAVY-chunk-MC5IVOX7.js-1

OBFUSCATION-UNICODE_HEAVY-chunk-RVO3HWKX.js-1

OBFUSCATION-INVISIBLE_ZERO_WIDTH-locales/ta/translation.json-0

NET-FETCH-chunk-RUM2AQRP.js-1

NET-SOCKET_IO-PortfolioHomeTabPage-35KPOD3V.js-37

NET-SOCKET_IO-chunk-2RTOGRMN.js-1

NET-FETCH-chunk-ZRGHR2IN.js-3

NET-FETCH-server.js-166

MANIFEST-SENSITIVE-PERM-TABS

NET-FETCH-chunk-4AQPJCXC.js-2

NET-FETCH-analytics.js-10

NET-JQUERY_AJAX-Popup.js-72

NET-FETCH-chunk-3AJAGTMM.js-1

NET-SOCKET_IO-chunk-A3G7GEPI.js-177

OBFUSCATION-LARGE_WASM_FILE-rive-AI73FSNU.wasm-0

NET-FETCH-server.js-171

NET-FETCH-server.js-182

NET-FETCH-chunk-ZH5RS64R.js-1

OBFUSCATION-LARGE_BASE64-chunk-NWGK6ZWZ.js-2

NET-FETCH-chunk-UHSNE5YF.js-1

YARA Rule Matches

Network Indicators

Publisher Evidence

Finding Categories

YARA Rules Matched

Requested Permissions

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

About This Extension

Frequently Asked Questions

Similar Extensions

Falcon Secure Access Extension - Connect

VHS - Dev Tools

℘hanŧom 𝕎a❘let

VIUko

BriefFeed: AI Summaries for Social Feeds

Smart Video Controls