Chrome Web Store
5Versions
1Code reviewed

No malware found

In code review (v1.6.11)

Our reviewer read version 1.6.11 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Chrome extension source viewer, used by 100,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in September 2026.

The extension is a legitimate developer tool for viewing extension source code. All permissions (tabs, webNavigation, downloads, etc.) are essential for its functionality. No data exfiltration, tracking, or remote code loading was found. The publisher (Rob W) is a well-known security researcher with a strong reputation and other clean extensions. The ML model likely overfitted on the large code size, use of XMLHttpRequest, innerHTML, and patterns from minified libraries (, beautify, prism). The published manifest summary differs from the bundled manifest (MV3 vs MV2, declarativeContent vs declarativeWebRequest), but this is likely due to a delayed update on the CWS listing and does not indicate malice in the reviewed code.

Chrome extension source viewer

Chrome extension source viewer

ID: jifpbeccnghkjeaalbbjmodiffmgedin

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.7.1
Size
0.22 MB
Rating
4.0/5
Reviews
435
Users
100,000
Type
Extension
Updated
Sep 2, 2026
Category
Productivity Developer
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
37extensions
4 no longer listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
Rob WView Profile
Website
Visit
Extensions
37
Active
19
Obsolete
4
Listed
32
Unlisted
5
Users
835,294

Screenshots & videos

Screenshot 1
Screenshot 2

Install growth

Item
Type
Severity
Description
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
declarativeContent
Permission
Medium
This permission controls extension activation based on page content. Rated Medium because it can monitor page content matches and selectively activate extension features.
*://clients2.google.com/service/update2/crx*
Host
Medium
Host permission — access limited to this URL pattern.
*://clients2.googleusercontent.com/crx/download/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: *://clients2.google.com/service/update2/crx*, *://clients2.googleusercontent.com/crx/download/*
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

View source code of Chrome extensions, Firefox addons or Opera extensions (crx/nex/xpi) from the Chrome web store and elsewhere.

Read the publisher’s full description

View the source code of any Chrome extension in the Chrome Web store without installing it. Features: - Button at the Chrome Web store - Download extension as zip file - View source - Configurable via context menu on button: Set one-click action via "primary action on click". - View source: - File name/type filter - Search in the file content (literal or regexp) - Automatic beautification (formatting) of code - Syntax highlighting - Show hashes (md5, sha1, sha256, sha384, sha512) of individual files - Image preview - View embedded zip files - View any zip file by URL or file chooser - View source of platform-specific extensions (such as Chrome OS-only extensions, or NaCl for a different architecture). - Permalink to file and search result within a zip or extension file. - Full support for incognito mode. - Outputs public key and extension ID to the console. Optional features (see options page): - View source of Opera 15+ extensions, Edge extensions, Firefox addons or Thunderbird add-ons. - "View extension source" contextmenu item on links to Chrome extensions - View source of Chrome extensions outside the webstore. The View source button becomes visible when you select a CRX file for download. Source code: https://github.com/Rob--W/crxviewer Online demo: https://robwu.nl/crxviewer/ Contact: rob@robwu.nl Change log: - 1.2.3: Add "downloads" permission to make sure that the "Download" button always works as intended. - 1.2.4: Add extra parameters to the CRX URL to make sure that CRX files of extensions uploaded to the Chrome Web Store after July 2014 are correctly read. - 1.2.6: Sync options, use optionsV2, show numeric progress instead of dots, updated JSBeautifier, restore font size. - 1.2.7: Bugfixes (viewer height, checkbox filter). - 1.3: Support Firefox addons (also available as a Firefox addon!) Search within files Customize webstore download parameters View embedded zip files and any zip file - 1.3.1: Use correct URL for loading extension files. - 1.3.2: Bugfix to allow unusual extension URLs to be opened again. - 1.4: New syntax highlighter, improved search controls, improved word wrap. - 1.5: Calculate hashes, add link to Github project page, bugfix for case-sensitive search. - 1.6: Improved search highlighting & also search in beautified content. - 1.6.2: Configurable "primary action on click", open new tab next to current tab. - 1.6.4: Support the new CRX3 Chrome extension file format (#62). - 1.6.6: Permalink support, Firefox add-on finder. - 1.6.7: Fix broken extension due to bug with storage access and NativeCrxBindings. - 1.6.8: Support CRX3 file format from CWS; support some other AMO domains. - 1.6.9: Add option to add the context menu item to more links (#69), open new tabs via context menu next to current tab. - 1.6.10: Improve syntax highlighting (perf, highlighting of WebAssembly source), show sum of file sizes. - 1.6.11: Add "Extension ID" row at Analysis of manifest.json, improve CRX3 public key detection, improve zip fallback detection. - 1.6.12: Support source viewing of Edge and Thunderbird extensions, recognize CRX3 from Opera, update beautifier. - 1.6.13: Work around Chrome bug that broke the extension button (#120). - 1.7.0: Support new Chrome Web Store (#134), and migrate to Manifest Version 3.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
76
IPv4
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Showing 1 to 5 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from Rob W

Popular in productivity/developer