Chrome Web Store
131Versions
1Code reviewed

No malware found

In code review (v1.54.1)

Our reviewer read version 1.54.1 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

AboveVTT, used by 100,000 people, showed no malicious code in Extension Auditor's review. It was last updated in October 2026.

Analyst notes

The extension is a legitimate VTT for D&D Beyond. All network activity goes to the developer's own backend ([domain withheld]) for core functionality (saving scenes, tokens, etc.) or to D&D Beyond's API. The heavy DOM manipulation, large script size, and use of iframes are expected in a complex interactive extension. No unauthorized third-party data collection, credential theft, or code injection was found. The ML model’s flagging is likely due to benign patterns (large files, many innerHTML calls, iframe usage) that are intrinsic to a rich web application.

AboveVTT

AboveVTT Chrome extension security report

ID: ipcjcbhpofedihcloggaichibomadlei

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.60
Size
3.57 MB
Rating
4.9/5
Reviews
279
Users
100,000
Type
Extension
Updated
Oct 5, 2026
Category
Just for fun
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Author
daniele83.martini
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
100,000

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4

Install growth

Item
Type
Severity
Description
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk: • 10% increase: Early script execution enables pre-emptive content manipulation
*://*.dndbeyond.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

About this extension

Integrated VTT for D&DBeyond

Read the publisher’s full description

Integrated VTT for D&DBeyond Turn your dndBeyond (DDB) campaign page into a VTT with AboveVTT - d&d made easy. AboveVTT is a all-in-1 chrome extension that allows you and your friends to turn your DDB Campaign page into a VTT session in seconds. No sign up, no fees, just your DDB account (free) and you are ready to go, With your DDB character sheet, 1 click maps, 1 click tokens (monsters & PCs), easy fog of war and more! Key features, advantages and DDB integrations: ⚡️ Use your DDB character sheet from the web or DDB app! HP, dice rolls, conditions & send spells, abilities, and even monster art directly to chat. ⚡️ Monsters, more monsters and even more monsters - 1-Click DBB monster tokens (Art,HP,AC) with clickable stat blocks (Hit, Dis/Adv, Crit) Including homebrew monsters. - Open5e monster stat blocks with clickable stat blocks - Customer monster stat blocks ⚡️Maps, more maps and even more maps - 1-Click official DDB maps (pre-grided by our discord community) including all player & DM versions from your purchased DDB modules. - 1-Click 500+ battle maps supplied by Neutral Party, Dice Grimorium and hundreds of animated VIDEO maps. - Import UVTT files with official DungeonAlchemist map integration - Community produced module scenes with pre-populated tokens ⚡️Prepare like a pro DM! - Access your own material from anywhere that you can share via a URL (One Drive/Google Drive etc) - Grid Wizard - standard grid and hex grid maps - Dynamic light and vision for tokens using walls, windows and doors. - All tokens can have persistent, custom images assigned to make your game your own - Create and manage scenes with Cloud-persisted folders - Fog of War - Dynamic text creation and drawing - In-app import chapters from the DDB books you own for easy accessibility of material - Create notes on tokens that you can make available for players to see/access. - Fine-grained permissions to allow players access to multiple tokens and effects. ⚡️Camera, Action! - Projector mode for live streamers to showcase player view to their audience - Use DDB dice, RPG Dice Roller or standard notation - In-built sound player - Pause the action at any time with a single key press - Hot Keys available for common actions ⚡️Comprehensive community managed support and thriving Discord channel

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
1.60
Latest
3.57 MBNot scanned—N/A
1.59.1
3.54 MBNot scanned—N/A
1.59
3.53 MBNot scanned—N/A
1.48
3.40 MBNot scanned—N/A
1.57
3.47 MBNot scanned—N/A
1.58
3.48 MBNot scanned—N/A
1.57.1
3.48 MBNot scanned—N/A
1.56
3.47 MBNot scanned—N/A
1.55
3.45 MBNot scanned—N/A
1.54.1
3.45 MBNo malware found0N/A
Showing 1 to 10 of 140 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Just for Fun