Chrome Web StoreDo not install
Code review: high
Our reviewer read this extension’s code and confirmed malicious behaviour. 2 security findings documented below. Do not install it. Remove it if you already have it.
2 high-severity findings in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Apple Music(iTunes) Web Player, used by 1,000 people, is rated malicious by Extension Auditor. Our code review reported 2 findings (2 high), led by unauthorized data collection. It comes from a publisher with 5 extensions and was last updated in September 2026.
Key findings
- High
Unauthorized Data Collection
is_default:true makes this the browser's default search engine, so every query typed in the address bar is sent to [domain withheld] rather than only keyword-scoped music lookups. The suggest_url additionally causes Chrome to transmit partial, as-you-type omnibox input to [domain withheld] on every keystroke. The publisher's CWS data-collection disclosure is "none declared", so neither the full search queries nor the keystroke stream is covered by any disclosure, and the domain matches neither the publisher website (a [domain withheld] page) nor the publisher-level privacy policy ([domain withheld]).
- High
Phishing
The hijacking search provider is deliberately mislabelled: it presents in Chrome's settings as name "Web" with keyword "Yahoo Search" while actually pointing at [domain withheld], a domain whose name imitates "Chrome Web Store". The store listing reinforces the deception by telling users to type "ams" for a keyword search and claiming results come from "Google site search", yet the manifest declares no omnibox key and no Google endpoint, so the only search path is the silent default-engine takeover.:56 compounds this by telling the user to type "apple", a keyword that does not exist either.
Analyst notes
14-23 declares a chrome_settings_overrides.search_provider with is_default:true, silently taking over every omnibox search and routing it to [domain withheld]}, plus a suggest_url that streams as-you-type keystrokes to [domain withheld]. The provider is disguised as name:"Web" with keyword:"Yahoo Search", the listing promises a keyword-triggered "ams" omnibox search (there is no omnibox key in the manifest at all) and claims it uses "Google site search", and CWS-disclosed data collection is "none declared". chrome-stats' High permission-override-search-provider flag and the Accessibility category mismatch corroborate; our own risk-engine 0.00 and the publisher's clean leave-one-out record contradict, but the risk engine scored 0.00 only because chrome_settings_overrides is not a permission and so never entered its scoring at all.
Apple Music(iTunes) Web Player Chrome extension security report
ID: lmnnbjniocahgmdmhgpbfdapbelhjnil
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Jesse White
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
This extension requests no permissions and has no recorded risk factors.
- 2 high
The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.
2 high-severity findings in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Unofficial Apple Music(iTunes) Player Search Extension.
Read the publisher’s full description
Apple Music(iTunes) Web Player Extension. Search & play music from Apple Music using Google site search directly from chrome omnibox (search box). This is Apple Music player search that allows the user seamlessly search track, albums, artists while surfing the web by navigating to the Apple Music(iTunes) user interface. How to Use 1.First open Apple music web player(https://music.apple.com/). Keep it logged in to search and play music seamlessly directly from chrome omni box. 2. Now you can click extension icon to launch search or use omnibox and type "ams" enter tab key and type to search the track of your choice. 3. When you find the track , music or song you were looking for just click the link. 4. If you are already logged into Apple music(iTunes) you will be able to play it asap else you will be asked to log in. 5. Enjoy Searching Apple music(iTunes). To provide this functionality extension takes over you default search for seamless experience.. Updates log version 1.1: New updated extension logo and Google search suggestions for an improved song search experience.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
2 high-severity findings in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from Jesse White
- Quick Spotify Search20,000 users
- Quick Web Search with Amazon Shortcuts (All Countries)10,000 users
- YouTube Music Web Player Search7,000 users
- Cloud Music Web Player14 users
Popular in Accessibility
- 360 Internet Protection19,000,000 users
- Dark Reader7,000,000 users
- Volume Master7,000,000 users
- Secure Exam Proctor7,000,000 users
- Screenshot reader™7,000,000 users