Chrome Web Store

Google Chrome browser extensions

The Chrome Web Store is the largest extension marketplace we track, with roughly 360,000 listings and an install base measured in billions of devices. That scale makes it the single most attractive target for extension malware: campaigns like RedDirection and the Cyberhaven OAuth-phishing wave both turned previously-trusted Chrome extensions into credential harvesters through routine updates. Every listing here gets the same analysis pipeline — YARA rules, secret scanning, permission and host-access review, dependency checks, and IOC enrichment — so you can check any extension before it touches a browser profile that is already logged in to everything.

• –Host-permission creep: broad <all_urls> access on pages where users enter passwords and MFA codes
• –Auto-updates that change owners or code after you installed on reputation
• –Obfuscated background workers, remote-config beacons, and injected ad or data-collection scripts

Security intelligence powered by Risky Plugins