Chrome Web StoreCaution required
Suspicious in code review (v0.0.2)
Our reviewer found behaviour consistent with malware in version 0.0.2, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
11 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
BitTorrent For Chrome, used by 5,000 people, is rated caution by Extension Auditor. Our code review reported 2 findings (1 high, 1 medium), led by remote code loading. It comes from a publisher with 2 extensions and was last updated in August 2024.
Key findings
- High
Remote Code Loading
On install (and on update, lines 238-246) the extension silently fetches `[domain withheld], stores the full response in `chrome.storage.local`, and conditionally opens a new tab to whatever URL the server provides via `[domain withheld]`. The domain `[domain withheld]` has no affiliation with BitTorrent and is not disclosed in CWS data collection. This gives the operator full remote control over where the browser navigates on install or update — a classic pattern. It directly matches the user review complaint about the extension changing the browser address without consent.
- Medium
Other
The options page exposes a "Human Search" UI labeled "You can Click Search Result For Organic Search" with configurable repeat count and controls that message the background worker. This language is standard terminology for click-fraud and organic-search-rank-manipulation services. While lacks a visible `onMessage` listener for this in the reviewed source, the UI's presence in an extension marketed solely as a torrent helper is a strong indicator of undisclosed secondary functionality, consistent with the user-review complaint about unintended browser behavior.
Analyst notes
line 272 defines a hard-coded third-party URL (`[domain withheld]) that is fetched on every install and update; the response controls whether to open a new tab to a remote-supplied `link` field (`d.InstallOpenSite`, `d.AfterOpenSite`), making this a remotely-controlled adware redirect that is entirely unrelated to BitTorrent functionality and undisclosed in CWS data-collection. This corroborates the publisher's 100% malicious track record ( other extension malicious) and the user review complaint that the extension "Changes browser search address without consent." The BitTorrent-to-localhost API wiring in is legitimate, but the covert install-time beacon to a non-first-party domain with tab-hijacking potential is a clear adware vector; confidence is medium rather than high because I cannot confirm what `[domain withheld]` currently returns without live testing.
BitTorrent For Chrome Chrome extension security report
ID: hagcapmimfcbfdhgmdnabeifnfbicmij
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- BitTorrent
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
11 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Send Link to BitTorrent For Chrome
Read the publisher’s full description
BitTorrent Add magnet with One Click %100 WORKING Send a link to the BitTorrent Web UI and BitTorrent PC UI The extension adds an item in the contextual menu when right click is done over a magnet link. You can then, send that link to the BitTorrent UI without leaving the current page. Allows to instantly begin download of a torrent or magnet link into a configurable set of directories in BitTorrent. Very useful, if… Allows to instantly begin download of a torrent or magnet link into a configurable set of directories in BitTorrent. Very useful, if you have BitTorrent on a dedicated machine.
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
11 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
More from BitTorrent
- BitTorrent Integration Module106 users
Popular in Tools
- Montara Chrome Extension639,000,000 users
- 迅雷下载支持85,000,000 users
- Claude21,000,000 users
- ApexGuard VPN Proxy for Chrome10,000,000 users
- Tenelk VPN10,000,000 users
Store rankings
Where this extension appears in store category, collection and keyword rankings.