What our analysis found

Add to MyRegistry.com Button, used by 200,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in October 2026.

The extension is a legitimate shopping registry tool that extracts website content only upon user interaction and sends it to the publisher's own servers (). This behaviour is consistent with the CWS-disclosed 'Website content' collection category and the extension's stated purpose. No unauthorized data exfiltration, obfuscation, or malicious patterns were found. The ML model signals (innerHTML, base64, network requests, etc.) are all explainable by standard DOM manipulation, inline images, and first-party API calls. The permhash cluster containing 20% flagged peers is likely skewed by similarly permissioned but functionally different extensions; the specific code here is benign.