Chrome Web Store
12Versions
1Code reviewed

No malware found

In code review

Our reviewer read this extensionโ€™s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.

What our analysis found

AutoFill Forms, used by 100,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in November 2025.

The extension functions exactly as described: it fills web forms using locally stored profiles. All code is local, data is stored only in chrome.storage, and no external network calls are made for user data. The permissions are necessary for its autofill operations and are appropriately disclosed. The ML risk signals are from normal DOM manipulation patterns and the 'scripting' permission, which are intrinsic to a form-filling tool. No evidence of data exfiltration, tracking, or malicious behavior was found.

AutoFill Forms

AutoFill Forms Chrome extension security report

ID: focmhibpdifbdjacabpgnifhdalgfogg

Supported Languages

๐Ÿ‡ง๐Ÿ‡ทBrazilian Portuguese
๐Ÿ‡จ๐Ÿ‡ณChinese (Simplified)
๐Ÿ‡ณ๐Ÿ‡ฑDutch
๐Ÿ‡บ๐Ÿ‡ธEnglish
๐Ÿ‡ซ๐Ÿ‡ทFrench
๐Ÿ‡ฉ๐Ÿ‡ชGerman
๐Ÿ‡ฎ๐Ÿ‡นItalian
๐Ÿ‡ฏ๐Ÿ‡ตJapanese
๐Ÿ‡ฐ๐Ÿ‡ทKorean
๐Ÿ‡ต๐Ÿ‡นPortuguese
๐Ÿ‡ท๐Ÿ‡บRussian
๐Ÿ‡ช๐Ÿ‡ธSpanish

Extension Info & Metadata

Status
Active
Version
0.4.9
Size
0.09 MB
Rating
3.4/5
Reviews
82
Users
100,000
Type
Extension
Updated
Nov 10, 2025
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
35extensions
4 no longer listed
Scanned by Extension Auditor โ€” Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
tlintspr
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
35
Active
21
Obsolete
4
Listed
32
Unlisted
3
Users
533,096

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

About this extension

One-click form filler that supports multiple profiles and regular expression rules

Read the publisherโ€™s full description

The "AutoFill Forms" extension is a user-friendly tool for automatically filling web forms, supporting multiple profiles. Features: 1. Easily create or update profiles by detecting user-inserted data in filled forms. - This feature simplifies the process of creating multiple profiles or updating stored data. 2. Generate random strings using Regular Expressions. - Randomly fill password fields or generate new security question passphrases. 3. Request the extension to generate a random password, conveniently stored on your clipboard. 4. Manage multiple profiles. - Duplicate or modify existing profiles on the options page. 5. Import and export preferences. 6. Locate element positions based on their physical location within the form. 7. Supports both dark and light themes. Notes: Your profile data is securely stored in your browser's profile directory, with no backup created by the extension for security reasons. --- Changes (0.3.0) 1. The extension now operates in event background page mode, consuming no resources when not in use. 2. The extension is enhanced to fill forms that don't perfectly match the predefined fields. --- Changes (0.3.2) 1. Resolved the issue where multi-line text was not being inserted from the context menu.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
23

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Version
Size
Verdict
Findings
Permhash
0.4.9
Latest
0.09 MBNo malware found0
f671a475a6e92ed855d78d76f9a60a89295c0ac1364a23baf36f1c80d3705a1e
0.4.8
0.09 MBNot scannedโ€”
f671a475a6e92ed855d78d76f9a60a89295c0ac1364a23baf36f1c80d3705a1e
0.4.6
0.09 MBNot scannedโ€”
f671a475a6e92ed855d78d76f9a60a89295c0ac1364a23baf36f1c80d3705a1e
0.4.5
0.09 MBNot scannedโ€”
f671a475a6e92ed855d78d76f9a60a89295c0ac1364a23baf36f1c80d3705a1e
0.4.4
0.09 MBNot scannedโ€”
f671a475a6e92ed855d78d76f9a60a89295c0ac1364a23baf36f1c80d3705a1e
0.4.3
0.08 MBNot scannedโ€”
f671a475a6e92ed855d78d76f9a60a89295c0ac1364a23baf36f1c80d3705a1e
0.4.2
0.08 MBNot scannedโ€”
f671a475a6e92ed855d78d76f9a60a89295c0ac1364a23baf36f1c80d3705a1e
0.4.1
0.08 MBNot scannedโ€”
f671a475a6e92ed855d78d76f9a60a89295c0ac1364a23baf36f1c80d3705a1e
0.4.0
0.07 MBNot scannedโ€”
f671a475a6e92ed855d78d76f9a60a89295c0ac1364a23baf36f1c80d3705a1e
0.3.3
0.08 MBNot scannedโ€”
d192b3733274b010ce7816ce9f68b1cd2eb8f91ca0b319f2d696e867a0fabb8b
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

More from tlintspr

Popular in Workflow & Planning