Chrome Web Store
67Versions
1Code reviewed

Caution required

Suspicious in code review (v5.2.5)

Our reviewer found behaviour consistent with malware in version 5.2.5, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

35 indicators in this extension

35 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

AG Translate, used by 100,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can inject scripts into pages.

Key findings

  • High

    Other

    The bundled manifest lacks the <all_urls> host_permission and several permissions (tabs, tts, downloads, webRequest) that appear in the published CWS manifest summary. This discrepancy may indicate that the published version has broader access than the bundle being reviewed, which could be a delayed-malicious update or a mismatch between versions.

Analyst notes

The bundled manifest lacks <all_urls>, tabs, tts, downloads, and webRequest present in the published CWS manifest, which is a significant mismatch (possible delayed-malicious update). The extension's publisher reputation is concerning ( other extension flagged malicious) and a permhash cluster showing 56% malware rate. Key parts of the source (,) were not provided for analysis, preventing a full review. The visible code loads translation UIs, sends text to known translation APIs, and includes VIP upsells—these are consistent with a legitimate translation extension, but the missing code could hide malicious behavior.

AG Translate

AG Translate Chrome extension security report

ID: bincmiainjofjnhchmcalkanjebghoen

Supported Languages

🇪🇹Amharic
🇸🇦Arabic
🇧🇩Bengali
🇧🇷Brazilian Portuguese
🇧🇬Bulgarian
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇭🇷Croatian
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇪🇪Estonian
🇵🇭Filipino
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇬🇷Greek
🇮🇳Gujarati
🇮🇱Hebrew
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇮🇳Kannada
🇰🇷Korean
🇱🇻Latvian
🇱🇹Lithuanian
🇲🇾Malay
🇮🇳Malayalam
🇮🇳Marathi
🇳🇴Norwegian
🇮🇷Persian
🇵🇱Polish
🇵🇹Portuguese
🇷🇴Romanian
🇷🇺Russian
🇷🇸Serbian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇰🇪Swahili
🇸🇪Swedish
🇮🇳Tamil
🇮🇳Telugu
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
5.3.6
Size
1.09 MB
Rating
4.7/5
Reviews
144
Users
100,000
Type
Extension
Updated
Sep 2, 2026
Category
Productivity Tools
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Author
https://zenttranslate.com
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
100,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 10% increase: Early script execution enables pre-emptive content manipulation
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
https://translate.googleapis.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://translate.google.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://translate-pa.googleapis.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://edge.microsoft.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://api-edge.cognitive.microsofttranslator.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.bing.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://bing.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.bing.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://fanyi.baidu.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.deepl.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.zenttranslate.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://agtranslate.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://dict.youdao.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://translate.googleapis.com/*, https://translate.google.com/*, https://translate-pa.googleapis.com/*, https://*.bing.com/*, https://bing.com/*, https://www.bing.com/*, *://gemini.google.com/*, *://*.bing.com/translator*, *://translate.google.com/*
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
tts
Permission
Low
This permission enables text-to-speech functionality. Rated Low because it can only convert visible text to speech without accessing sensitive data.

35 indicators in this extension

35 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Translate the selected word in the side panel or a popup.

Read the publisher’s full description

Multiple translation methods: 📂 Sidebar translation: Select the text to view the translation results in the sidebar, which is convenient and fast without interrupting the current browsing. 💬 Pop-up translation in the page: After selecting the text, click the extension icon to pop up the translation results on the current page without leaving the current page. 🔧 Multi-source translation engine: Supports multiple translation engines. You can freely choose according to your needs to get more accurate and authentic translation results. ⚙️ Custom settings: You can set the default translation engine, translation language, shortcut keys, etc. to create a unique translation experience. 📚 History: Automatically save the translation history for you to view and manage at any time. Applicable scenarios: 📖 Quickly translate new words and phrases when reading foreign web pages and documents. ✍️ Find more authentic expressions when writing emails and articles. 🎓 Assists in understanding and memorizing words and sentences when learning a foreign language. Advantages: ⚡ Convenient and efficient: A variety of translation methods to meet the needs of different scenarios. 🎯 Accurate and reliable: Multi-source translation engine provides more accurate and authentic translation results. 🎨 Personalized customization: Customize settings to create a unique translation experience. 🔒 Safe and reliable: Protect your privacy, do not collect or store any user data. Install the AG translation extension now and start your efficient translation journey! 🚀

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
27
IPv4
8

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

35 indicators in this extension

35 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
5.3.6
Latest
1.09 MBNot scanned—
fc7111ccdf6811146a9657f70cd53e96936ab31db3e4151851ce997dbbaa4817
5.3.2
0.93 MBNot scanned—
0338cf1724eb4491c14d9da3be8f975c1fc3bc4be4137f9ad451315887227065
5.3.3
1.08 MBNot scanned—
fc7111ccdf6811146a9657f70cd53e96936ab31db3e4151851ce997dbbaa4817
5.1.3
0.60 MBNot scanned—
0338cf1724eb4491c14d9da3be8f975c1fc3bc4be4137f9ad451315887227065
5.3.1
0.90 MBNot scanned—
0338cf1724eb4491c14d9da3be8f975c1fc3bc4be4137f9ad451315887227065
5.2.6
0.89 MBNot scanned—
5a4e0ce107a973ff365939b48031553ad73f88dad6ccb85a5dbe5eef8ede0cee
5.2.5
0.88 MBCaution0
bfa092a72d5cee5aed7233a5659944e5ea7adfb7e2310c2c4d8df9f56791a624
5.2.4
0.88 MBNot scanned—
bfa092a72d5cee5aed7233a5659944e5ea7adfb7e2310c2c4d8df9f56791a624
5.2.3
0.88 MBNot scanned—
bfa092a72d5cee5aed7233a5659944e5ea7adfb7e2310c2c4d8df9f56791a624
5.2.2
0.88 MBNot scanned—
bfa092a72d5cee5aed7233a5659944e5ea7adfb7e2310c2c4d8df9f56791a624
Showing 1 to 10 of 70 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in productivity/tools