Chrome Web Store

12Versions

1Code reviewed

No malware found

In code review (v10.31.1013)

Our reviewer read version 10.31.1013 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Bitmoji, used by 2,000,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in March 2025.

The extension is a legitimate Bitmoji integration tool published by Snap Inc. All observed network requests go to first-party domains (,,) and the reputable InboxSDK CDN. The requested permissions (webRequest, webRequestBlocking, cookies, clipboardWrite, etc.) directly support the extension's core functionality (OAuth authentication, sticker insertion via clipboard/ DOM, integrations). Data collection categories disclosed in the CWS listing match the extension's need for avatar identity, sticker usage analytics, and optional location data. No code obfuscation, external script injection, or covert data exfiltration was found in the provided source. The high critical risk scores assigned by automated tools are false positives triggered by the broad permission set, which is appropriate for this extension's scope.

Bitmoji Chrome extension security report

ID: bfgdeiadkckfbkeigkoncpdieiiefpig

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

11.0.0

Size

1.45 MB

Rating

3.6/5

Reviews

2,100

Users

2,000,000

Type

Extension

Updated

Mar 10, 2025

Publisher Contextual Analysis

Trusted

Author: http://bitmoji.com/
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

2,000,000

Screenshots & videos

Install growth

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+100%(+1,000,000 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 2,096 ratings-2 (0%)

Average Rating

Current: 3.76 / 5.0+0.01

See plans

React Flow

Internal permhash`1b2037f3ad…`
No malicious matches

No other extension carries this fingerprint.

Permhash (Mandiant)`5b266c55f6…`
1 malicious

11 other extensions carry this fingerprint; 1 of the cluster are known malicious.

Withheldmalicious
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
+4 more

Network indicators

38 URLs and 2 IP literals were extracted from this version.

Item	Type	Severity	Description
cookies	Permission	High	This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
webNavigation	Permission	High	This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://.google.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://.bitbucket.org/	Host	Medium	Host permission — access limited to this URL pattern.
https://.github.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://.atlassian.net/	Host	Medium	Host permission — access limited to this URL pattern.
https://.bitmoji.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://.snapchat.com/	Host	Medium	Host permission — access limited to this URL pattern.
Access to Sensitive Domains	Risk Factor	Medium	This extension requests access to sensitive domains: https://.google.com/, https://.bitbucket.org/, https://.github.com/

Sensitive Domain Access

This extension has access to the following sensitive domains:

https://*.google.com/*
https://*.bitbucket.org/*
https://*.github.com/*

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Use Bitmoji anywhere on web!

Read the publisher’s full description

- Directly insert Bitmojis into Gmail - Click and drag to resize them - Copy and paste them almost anywhere If you don’t have a Bitmoji account, download the mobile app from bitmoji.com and create an avatar now! Need help? Head to https://support.bitmoji.com/hc/en-us

User reviews

2.8 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

I LOVE IT but only reason not a 5 star is it doesn't load 1/2 of the time. It's been an ongoing annoyance, I end up getting it from my phone and using. But besides that annoyance, BITMOJI'S ARE MY FAVORITE!

Anna Jackson Reid·25 Sept 2026

The 3D Bitmoji never prints out clear. At least the 2D style was a little more clear when I printed them.

Dalton Gorsuch·13 Aug 2026

Why can't i get it to work anymore? I used it all the time in class to personalize things and now it will not open no matter what I am trying!

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

IPv4

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version	Size	Verdict	Findings	Permhash
10.31.1243 Latest	1.45 MB	Not scanned	—	216a0294ff6277189082b039f6be337e88854f93f50ac7ca54820b510e16dc1f
10.31.1231	1.45 MB	Not scanned	—	216a0294ff6277189082b039f6be337e88854f93f50ac7ca54820b510e16dc1f
10.31.1224	1.44 MB	Not scanned	—	216a0294ff6277189082b039f6be337e88854f93f50ac7ca54820b510e16dc1f
10.31.1221	1.44 MB	Not scanned	—	216a0294ff6277189082b039f6be337e88854f93f50ac7ca54820b510e16dc1f
10.31.1218	1.44 MB	Not scanned	—	216a0294ff6277189082b039f6be337e88854f93f50ac7ca54820b510e16dc1f
10.31.1207	1.44 MB	Not scanned	—	a5140aa9cb522d976fad19eb12ebb4da8224d57b7925be3445bc23bcffc3c806
10.31.1190	1.44 MB	Not scanned	—	a5140aa9cb522d976fad19eb12ebb4da8224d57b7925be3445bc23bcffc3c806
10.31.1152	1.45 MB	Not scanned	—	1867bc4cad1aba95977db0b06a5e65c90f29e20526dc9c28ee25ce035f8985c2
10.31.1144	1.44 MB	Not scanned	—	1867bc4cad1aba95977db0b06a5e65c90f29e20526dc9c28ee25ce035f8985c2
10.31.1013	1.43 MB	No malware found	0	e644f11112dd76697eac20c106d6f815e4a4ba3a0da496a12b6ca1f85c23ef6f

Showing 1 to 10 of 20 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Social Networking

Cisco Webex Extension22,000,000 users
Mosaic Wallet4,000,000 users
vidIQ Vision for YouTube4,000,000 users
LINE4,000,000 users
Google Mail Checker2,000,000 users

No malware found

What our analysis found