Chrome Web Store

4Versions

1Code reviewed

No malware found

In code review (v2.4.0.913)

Our reviewer read version 2.4.0.913 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

24 indicators in this extension

24 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

What our analysis found

Avast SecureLine VPN, used by 60,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can read and change data on all websites, can inject scripts into pages and can observe network requests.

Key findings

High
Other
The bundled manifest requests significantly broader permissions than the published Chrome Web Store listing (which lists only storage, nativeMessaging, privacy, management, alarms, and specific host access to [domain withheld]). This discrepancy could mislead users about the extension's actual capabilities and access scope. While the permissions may be required for VPN and ad-blocking features, the listing is not transparent.

Analyst notes

The extension is published by a trusted security company (Gen Digital), with a legitimate purpose (VPN control for Avast SecureLine) and permissions necessary for VPN and ad blocking features. The ML risk score is low (0.00) and the permhash cluster shows 0% malware. No malicious code patterns were observed in the available files, and the published privacy policy covers the disclosed data collection. The only issue is a mismatch between the bundled and published manifest permissions, which is a transparency concern but does not indicate malpractice.

Avast SecureLine VPN Chrome extension security report

ID: phmegojolgpbbcnhccbfneddlooepbpd

Supported Languages

🇸🇦Arabic

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇱Hebrew

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇳🇴Norwegian

🇮🇷Persian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇻🇳Vietnamese

Extension Info & Metadata

Status

Active

Version

2.8.0.1043

Size

1.44 MB

Rating

3.3/5

Reviews

110

Users

60,000

Type

Extension

Updated

Jul 8, 2026

Publisher Contextual Analysis

Trusted

Author: Gen Digital
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

11,660,000

Screenshots & videos

Install growth

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

See plans

React Flow

Internal permhash`a379e079d8…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Permhash (Mandiant)`7d8c542c78…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Network indicators

21 URLs and 3 IP literals were extracted from this version.

Item	Type	Severity	Description
declarativeNetRequest	Permission	Critical	This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
webRequest	Permission	Critical	This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
<all_urls>	Host	Critical	Broad host access — the extension can read/modify content on every website.
nativeMessaging	Permission	High	This permission enables communication with applications installed on your computer. Rated High because it can exchange data with native programs, potentially exposing system-level information and local files.
cookies	Permission	High	This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Dangerous Permission Combination: scripting,cookies,webRequest	Risk Factor	High	Enables extensions to interact with scripts, modify files and downloads, and alter browsing history and bookmarks, potentially affecting data integrity and user control.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 10% increase: About:blank access enables potential sandbox escape vectors
Broad Host Permissions	Risk Factor	High	This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access	Risk Factor	High	This extension can inject scripts into any website.
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage	Permission	Medium	This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
Early Content Script Execution	Risk Factor	Medium	This extension runs content scripts at document_start.
About:blank Access	Risk Factor	Medium	This extension can run content scripts in about:blank pages.
alarms	Permission	Low	This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

24 indicators in this extension

24 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

About this extension

Easily turn your Avast SecureLine VPN on and off, or change your server location, from the comfort of your browser.

Read the publisher’s full description

The Avast SecureLine VPN Web Extension is a simple browser application that allows you to control your Avast SecureLine VPN easier and faster from your browser toolbar. One click, and you can turn your VPN on or off, or change where you’re connecting from to give you a perfectly seamless privacy experience. Please note that this is not a stand-alone VPN product. It requires Avast SecureLine VPN to be installed on your PC, which must be activated with a valid license. But once you get that going, then it’ll be good to go. Not sure what a VPN is? A VPN (or virtual private network) is like a secure tunnel that hides you when you browse. Normally when you connect online, everything you’re doing can be seen by whoever else is on the network, and your location and other personal information can be tracked. But when you connect with a VPN, your data is encrypted and your location is hidden, allowing you to use public wi-fi fearlessly and access websites and content that might be censored or geo-locked. Why Avast SecureLine VPN? ● Powerful, fast connection: Unlike other VPNs, Avast SecureLine VPN is optimized for performance, which means you’ll never have to choose between privacy and speed. ● 256-bit encryption: We use the same technology used by banks to keep their data safe to secure your connection to the internet. ● Worldwide selection: We offer 54 servers in 34 countries, giving you all the options you need… and then some. ● Hidden even to us: we don’t track the apps you use, the websites you visit or the content you consume, period. If someone asks, we just can’t answer. For private browsing no matter what you do or where you go, there’s no better choice.

User reviews

2.9 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Globalement, un Bon Bloqueur de Publicités et une Bonne Extension qui permets de Naviguer sur INTERNET sans être Pisté Constamment ! ! ! Pas trop Mal donc . . .

Vincent HELIES·30 Aug 2026

분할 터널링(Split Tunneling) 기능이 없음. 그래서 브라우저 확장기능인데도 브라우저만 VPN에 접속되는 게 아니라 PC의 모든 접속이 VPN으로 바뀌는 문제점이 있음. 브라우저만 VPN에 접속되도록 제한하는 옵션도 없음. 그래서 VPN과 국내에 동시 연결하는 게 불가. PC 전체를 VPN으로 연결하고 싶다면 독립 프로그램을 쓰는데... 브라우저 확장기능답게 설치한 브라우저에서만 VPN을 제공하든가, 분할 터널링(Split Tunneling)을 옵션으로 제공할 필요가 있음.

Kwon Nara·17 Jul 2026

Çok kötü. Tüm ip adresleri "ban"lanmış. Üstelik geçenlerde kullanım dışı sanal kartımdan yıllık ücret çekebilmişler! Bankama sordum "bazı şirketler bunu yapabiliyor!" dedi! E kardeşim sanal kart ne işe yarıyor? ve bu şirket para iadesi yapmamak için çok direniyor. Almayın, aldırmayın.

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

IPv4

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

24 indicators in this extension

24 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

Version	Size	Verdict	Findings	Permhash
2.8.0.1043 Latest	1.44 MB	Not scanned	—	7d8c542c783b334ad7f7469e21381dd716016d2be92b27eacef66f90d40bf17b
2.4.0.913	13.97 MB	No malware found	0	b28b2aef3b655d84d33fe53f17ea05ce01c0eb02919dec1ff145d928eac615b2
2.2.0.829	13.98 MB	Not scanned	—	b28b2aef3b655d84d33fe53f17ea05ce01c0eb02919dec1ff145d928eac615b2
1.0.978	0.98 MB	Not scanned	—	9571c3b12f0dd8348b547e2fa5ee80fc5edad1e0857e97903d96ecd81375a67a

Showing 1 to 4 of 10 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Privacy & Security

uBlock Origin Lite21,000,000 users
Imprivata Enterprise Access Management20,000,000 users
Kaspersky Protection19,000,000 users
AdGuard AdBlocker17,000,000 users
Online Security11,000,000 users

No malware found

24 indicators in this extension

What our analysis found

Key findings

Other

Avast SecureLine VPN Chrome extension security report

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Screenshots & videos

Install growth

User Growth

Rating Count

Average Rating

Threat relationships

Internal permhasha379e079d8…No malicious matches

Permhash (Mandiant)7d8c542c78…No malicious matches

Network indicators

Security analysis

Manifest File Security Analysis

24 indicators in this extension

Store listing & files

About this extension

User reviews

User Reviews

Extension files

Network indicators

URLs

24 indicators in this extension

Versions & changes

Version History

Code Diff

Related extensions

More from Gen Digital

Popular in Privacy & Security

User Growth

Rating Count

Average Rating

User Reviews

Threat relationships

Internal permhasha379e079d8…No malicious matches

Permhash (Mandiant)7d8c542c78…No malicious matches

Network indicators

Internal permhash`a379e079d8…`
No malicious matches

Permhash (Mandiant)`7d8c542c78…`
No malicious matches

Internal permhash`a379e079d8…`
No malicious matches

Permhash (Mandiant)`7d8c542c78…`
No malicious matches