Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: AEM Sidekick

CRITICAL RISKRemoved from Chrome Web Store

AEM Sidekick

ID: ccfggkjabjahcjoljmgmklhpaccedipo

Could be malicious

Supported Languages

🇧🇷Brazilian Portuguese

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇺🇸English

🇫🇷French

🇩🇪German

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇪🇸Spanish

Extension Info & Metadata

Status

Removed

Version

6.51.8

Size

0.17 MB

Rating

0.0/5

Reviews

Users

7,000

Type

Extension

Updated

Dec 4, 2025

Publisher Contextual Analysis

Trusted

Author: https://adobe.comView Profile
Privacy: Privacy Policy
Help: Help Center
Country: US
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: 345 Park Ave San Jose, CA 95110 US
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

7,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

AEM Sidekick allows authors of AEM sites to easily preview and publish content.

Key features: - Jump to the editor to make content changes - Switch between configured environments - Reload to see the latest content - Publish to make changes available on your site - Share AEM Sidekick configurations with your teammates - Easily add support for multiple sites - Keep AEM Sidekick visible or hidden across all your browser windows https://www.adobe.com/legal/licenses-terms.html

User Growth

Showing data from Mar 14, 2023 to Mar 12, 2024

Versions

-14.29%(-1,000 users)

Compared to 3 months ago

63 versions released in this period

Rating Count

Total: 8 ratings

Average Rating

Current: 5.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High0

Medium0

Low4

Versions scanned

Showing 1 of 96 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
6.51.8 Code review	4

Extension Version	Code Review Findings
6.51.8	4

Files with findings

3 distinct paths — top paths by unique finding count:

rum.js2
background.js1
utils.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	low	background.js (line 509)	Accepts auth tokens from external messages and stores them in chrome.storage. Sender origin is validated to be admin.hlx.page, which is the trust anchor — the security of every project token rests on that single origi…	6.51.8
2	Network Interception	low	utils.js (line 622)	Uses declarativeNetRequest to inject an Authorization: token <...> header into XHRs going to admin.hlx.page (and to project hosts under aem.page/aem.live for the site token). Tokens originate from a controlled OAuth f…	6.51.8
3	Remote Code Loading	low	rum.js (line 85)	Dynamically injects an external classic <script> from rum.hlx.page (Adobe's own RUM endpoint) into the page. While the host is Adobe-controlled, this is remote code loading: whatever JS is served at that URL executes …	6.51.8
4	Tracking	low	rum.js (line 71)	Sends Real User Monitoring beacons to rum.hlx.page (Adobe) including the full referer URL, a hashed-and-timestamped session id, and arbitrary checkpoint metadata. Sampling rate is 1/10 by default. This is first-party …	6.51.8

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


localhost	-	http://localhost:3000
https:	-	https://…
www.hlx.live	/sidekick%E2%80%A6	https://www.hlx.live/sidekick…
www.hlx.live	/docs/sidekick	https://www.hlx.live/docs/sidekick
www.hlx.live	/tools/sidekick/	https://www.hlx.live/tools/sidekick/
www.aem.live	/tools/sidekick/en/v7-teaser.png	https://www.aem.live/tools/sidekick/en/v7-teaser.png
chromewebstore.google.com	/detail/aem-sidekick/igkmdomcgoebiipaifhmpfjhbjccggml	https://chromewebstore.google.com/detail/aem-sidekick/igkmdomcgoebiipaifhmpfjhbjccggml?hl=de
...	-	https://...
www.hlx.live	/sidekick...	https://www.hlx.live/sidekick...
chromewebstore.google.com	/detail/aem-sidekick/igkmdomcgoebiipaifhmpfjhbjccggml	https://chromewebstore.google.com/detail/aem-sidekick/igkmdomcgoebiipaifhmpfjhbjccggml

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.1 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

The product is incredibly user-friendly, especially with the ability to preview and publish website pages in a single click. However, it would be highly beneficial to include an unpublish button as well. This feature would be invaluable in situations where a page is accidentally published. Thank you for considering this enhancement!

Mrugesh M·4 Dec 2024

Keeps getting better and better.

Jeff Foxx·31 Jul 2024

Easy to use!

Vivek Singh·28 May 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

AEM Sidekick

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 96 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating