Chrome Web Store
4Versions
1Code reviewed

Caution required

Suspicious in code review (v1.1.79)

Our reviewer found behaviour consistent with malware in version 1.1.79, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

1011 indicators in this extension

1011 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

All-In-One Adblocker : blocks ads everywhere, used by 200,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 medium), led by code injection. Its permissions mean it can read and change data on all websites, can inject scripts into pages and can observe network requests.

Key findings

  • Medium

    Code Injection

    The probe:eval message route accepts an arbitrary JavaScript string from any extension page context and eval()s it in the MAIN world of any tab matched by URL pattern. While the route is gated by the aio_diag_enabled local-storage flag and is not reachable from external web pages (no externally_connectable declared), the unreviewed remote-config module could silently set this flag — converting a developer diagnostic into a remotely activatable arbitrary-code-execution backdoor on any open tab. This capability exceeds what ad-blocking requires and is undisclosed in the CWS listing.

Analyst notes

The extracted files show a legitimate ad-blocker architecture — filter lists, TwitchAdSolutions Twitch ad-skip module, uBOL scriptlets from uBlock Origin, and standard stub replacements for ad-tech scripts. All visible outbound network references in point to the publisher's own domain ([domain withheld]). However, only 50 of the 534 reported extension files were present in the extraction bundle; the critical (remote config) and (telemetry) modules that handle all external data flows are absent, making full clearance impossible. Publisher anomalies corroborate risk: the publisher email domain has no MX records and reports domain_exists=False, yet the extension already has 100K users after just 19 days with only 1 review — an atypical growth pattern. The ML over-scores primarily on the Twitch module's synchronous XHRs, the large filter corpus, and an eval-based developer diagnostic included in. The third-party chrome-stats risk score ( impact, likelihood) corroborates moderate concern driven mainly by the recent creation date and low user count signal.

All-In-One Adblocker : blocks ads everywhere

All-In-One Adblocker : blocks ads everywhere Chrome extension security report

ID: okockappikfndbdfphjklenhfpdlgkgi

Supported Languages

🇧🇷Brazilian Portuguese
🇺🇸English
🇫🇷French
🇩🇪German
🇮🇹Italian
🇯🇵Japanese
🇪🇸Spanish

Extension Info & Metadata

Status
Active
Version
1.1.84
Size
6.64 MB
Rating
4.5/5
Reviews
101
Users
200,000
Type
Extension
Updated
Sep 11, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Trusted
Author
aioadblocker.com
MX records exist
No
Domain exists
No
Is disposable
No
Is role-based
Yes
Mailbox exists
No
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
200,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Dangerous Permission Combination: scripting,<all_urls>,webRequest
Risk Factor
Critical
Enables sophisticated data theft through script injection and traffic monitoring
webNavigation
Permission
High
This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

1011 indicators in this extension

1011 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Why pick one adblocker when you can have them all? Block ads on YouTube, Facebook & millions of sites — supercharged filters.

Read the publisher’s full description

Block ads on YouTube, Facebook, Twitch, Instagram & millions of sites. Crush the ads. Smash the trackers. Obliterate the popups. Annihilate the cookie walls. Destroy the spyware. Pulverize the malware. Stop the surveillance. End the noise. Reclaim your internet. Pre-roll ads. Mid-roll ads. Banner ads. Pop-ups. Pop-unders. Cookie walls. GDPR nags. Newsletter prompts. Push notifications. Sponsored content. Promoted posts. Fingerprinting scripts. Tracking pixels. Data brokers. Anti-adblock walls. Crypto-jackers. Phishing domains. Malware hosts. Vaporized. All-In-One Adblocker (AIO) isn't another ad blocker. It's the ad blocker — the one with the firepower of an entire open-source ecosystem packed into a single click. The one that actually works on the sites that fight back. One install. Everything stops. This is the only adblock you'll ever need. ═══════════════════════════════════════ 🚀 SIX ENGINES. ONE ADBLOCKER. ═══════════════════════════════════════ Most ad block extensions ship one engine. AIO ships SIX, running in parallel: ● AD KILLER — blocks ads before they ever load ● EYE CLEANER — hides the banners that slip through ● BYPASS BUSTER — defeats anti-adblock walls ● PAGE FIXER — strips ad scaffolding out of the page ● MALWARE SHIELD — blocks bad sites before they reach you ● MEGA FILTER — 200,000+ domain rules, millions of sites covered That's why AIO catches what other adblockers miss. That's why this is the ad blocker to end all ad blockers. ═══════════════════════════════════════ 🎬 THE BEST YOUTUBE ADBLOCKER ═══════════════════════════════════════ YouTube is where most ad blockers crumble. AIO destroys: ● Pre-roll video ads ● Mid-roll interruptions ● The "5 second" delay screen ● Banner ads under the player ● Sponsored cards in your feed ● Search result ads YouTube the way it was meant to be watched. Just the video. No ads. No compromises. ═══════════════════════════════════════ 🛡️ ANTI-ADBLOCK SLAYER ═══════════════════════════════════════ "Please disable your adblocker." Not anymore. AIO ships with hand-tuned scriptlets that defeat the most stubborn anti-adblock walls on the web — silently, before they ever appear. You don't see the popup. You don't see the blur. You just see the content. ═══════════════════════════════════════ ⚡ FASTER. LIGHTER. CLEANER. ═══════════════════════════════════════ Manifest V3 native. Tiny memory. Fast service worker. Pages load 2–3× faster with AIO running. Less data, less battery, less noise, more peace. ═══════════════════════════════════════ 📊 THE NUMBERS ═══════════════════════════════════════ ● 56 filter lists, updated continuously ● 200,000+ domain rules ● 8,000+ malware shields ● 6 engines in parallel ● Millions of sites covered ● 1 click to install ═══════════════════════════════════════ 💡 FAQ ═══════════════════════════════════════ ▸ Is AIO free? Yes. Always. No premium tier. No subscription. ▸ Does this ad blocker work on YouTube? Yes. We update filters constantly to keep the YouTube adblock working, even when YouTube changes its ad system. ▸ Will AIO slow my browser down? The opposite. Most users see 2–3× faster page loads. ▸ Can I whitelist a site I want to support? One click. Your favorite creators still get their revenue when you choose to give it. ▸ How is AIO different from other ad blockers? AIO combines the filter lists, scriptlets, and rules of an entire open-source ecosystem into one Manifest V3 extension. Other ad blockers run one engine. AIO runs six. ═══════════════════════════════════════ Install All-In-One Adblocker. Stop the ads. Stop the trackers. Reclaim your browser. The only ad blocker, adblock extension, ad block tool, and adblocker you'll ever need. Website: https://aioadblocker.com Support: support@aioadblocker.com

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
944
IPv4
66
IPv6
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

1011 indicators in this extension

1011 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.1.84
Latest
6.64 MBNot scanned—
5b5538c5f9c169578156ca690440dfa20cc2081aec2c67dff7408441756de6fd
1.1.83
6.64 MBNot scanned—
5b5538c5f9c169578156ca690440dfa20cc2081aec2c67dff7408441756de6fd
1.1.81
6.73 MBNot scanned—
5b5538c5f9c169578156ca690440dfa20cc2081aec2c67dff7408441756de6fd
1.1.79
6.79 MBCaution0
5b5538c5f9c169578156ca690440dfa20cc2081aec2c67dff7408441756de6fd
Showing 1 to 4 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Tools