Extension Auditor
Sign Up
Chrome Web Store
10Versions
1Code reviewed

Caution required

Suspicious in code review (v1.0.6)

Our reviewer found behaviour consistent with malware in version 1.0.6, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

45 indicators in this extension

45 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

bilibili哔哩哔哩视频下载助手, used by 80,000 people, is rated caution by Extension Auditor. Our code review reported 3 findings (1 high, 2 medium), led by other. It comes from a trusted publisher and was last updated in August 2025.

Key findings

  • High

    Other

    The permissions declared in the bundled do not match the permissions shown in the Chrome Web Store listing. The published listing includes 'cookies' and 'downloads', which are absent from the extension's codebase. Such discrepancies can be a sign of a delayed update or review-bypass attempt, raising suspicion.

  • Medium

    Unauthorized Data Collection

    The extension tracks user activation events (daily popup opens) and sends an 'active' event via runtime messaging. This behavioral data collection is not disclosed in the CWS privacy disclosures (declared as 'none'). Combined with similar download-event tracking in, it constitutes undeclared data collection.

  • Medium

    Unauthorized Data Collection

    The content script fires an analytics event ('Download') whenever a video download is triggered. As with the popup event, this data collection is not reported in the extension's CWS privacy disclosures, raising concerns about transparency.

Analyst notes

The extension's core functionality (Bilibili video downloader) is legitimate and the code does not contain overtly malicious payloads. However, the published CWS manifest includes additional permissions ('cookies', 'downloads') not present in the bundled source, creating a discrepancy that could indicate a delayed-malicious update. Additionally, the extension send undisclosed behavioral analytics events (user active, download) without the required CWS data-collection declaration.

bilibili哔哩哔哩视频下载助手

bilibili哔哩哔哩视频下载助手 Chrome extension security report

ID: nlhgchhigkpbiefockjkoocnjgbdmpkl

Supported Languages

🇪🇹Amharic
🇸🇦Arabic
🇧🇩Bengali
🇧🇷Brazilian Portuguese
🇬🇧British English
🇧🇬Bulgarian
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇭🇷Croatian
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇪🇪Estonian
🇵🇭Filipino
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇬🇷Greek
🇮🇳Gujarati
🇮🇱Hebrew
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇮🇳Kannada
🇰🇷Korean
🇲🇽Latin American Spanish
🇱🇻Latvian
🇱🇹Lithuanian
🇮🇳Malayalam
🇮🇳Marathi
🇮🇷Persian
🇵🇱Polish
🇵🇹Portuguese
🇷🇴Romanian
🇷🇺Russian
🇷🇸Serbian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇰🇪Swahili
🇸🇪Swedish
🇮🇳Tamil
🇮🇳Telugu
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇺🇸US English
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
1.0.18
Size
0.47 MB
Rating
4.8/5
Reviews
558
Users
80,000
Type
Extension
Updated
Aug 17, 2025
Category
Just for fun
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue
This publisherTrack record
3extensions
1 no longer listed

Publisher Contextual Analysis

Trusted
Author
ad.jonesfield
Privacy
Privacy Policy
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
3
Active
2
Obsolete
1
Listed
3
Unlisted
0
Users
45,674

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
http://*.bilibili.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.bilibili.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

45 indicators in this extension

45 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

【精选推荐】哔哩哔哩视频下载神器，版权受限的番剧也能轻松下载，支持各种清晰度。

Read the publisher’s full description

【精选推荐】专业的哔哩哔哩视频下载神器，轻松实现b站视频下载，并且版权受限的番剧也能轻松下载，支持各种清晰度。 b站视频怎么下载到电脑上？只需要安装b站视频下载助手，一键轻松实现b站下载视频，包括版权受限（能看不能缓存）的番剧视频。同时，支持各种清晰度视频的下载。 特点： 1. 操作界面简单，自动嗅探视频；下载清晰度不受限制；支持各种视频下载。 2. 免费的bilibili视频下载工具，一键下载下载bilibili视频 操作说明： 1. 安装本扩展，并打开你要播放的视频页面。 2. 通过调整播放器清晰度，确认下载视频的清晰度。 3. 点击插件图标，即可下载。 其他附件功能： 推广AI助手扩展，欢迎使用！

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up
URLs
22

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

45 indicators in this extension

45 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.0.14
Latest
0.45 MBNot scanned—
8e416e8c0f01103f2faa332cc6d12dde38b18b220c00a86d6b0e4e046a605334
1.0.13
0.45 MBNot scanned—
8e416e8c0f01103f2faa332cc6d12dde38b18b220c00a86d6b0e4e046a605334
1.0.10
0.40 MBNot scanned—
8e416e8c0f01103f2faa332cc6d12dde38b18b220c00a86d6b0e4e046a605334
1.0.9
0.40 MBNot scanned—
43990a5002d66e8f943be6a9d9bbc2b15179138c05bd48123db8e9416ef16abd
1.0.8
0.40 MBNot scanned—
43990a5002d66e8f943be6a9d9bbc2b15179138c05bd48123db8e9416ef16abd
1.0.7
0.40 MBNot scanned—
43990a5002d66e8f943be6a9d9bbc2b15179138c05bd48123db8e9416ef16abd
1.0.6
0.40 MBCaution0
43990a5002d66e8f943be6a9d9bbc2b15179138c05bd48123db8e9416ef16abd
1.0.5
0.40 MBNot scanned—
43990a5002d66e8f943be6a9d9bbc2b15179138c05bd48123db8e9416ef16abd
1.0.3
0.22 MBNot scanned—
43990a5002d66e8f943be6a9d9bbc2b15179138c05bd48123db8e9416ef16abd
1.0.18
0.47 MBNot scanned—
411b3803b0b53813d3eda0bf58c5ac2f5ac05ce50fcc8c9454748bce2d49271f
Showing 1 to 10 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up

Related extensions

More from ad.jonesfield

Popular in Just for Fun