CookieCloud

ID: ffjiejobkoibkjlhjnlgmcnnigeelbdl

Supported Languages

🇨🇳Chinese (Simplified)

🇺🇸English

Extension Info & Metadata

Status

Active

Version

1.0.3

Size

0.24 MB

Rating

4.4/5

Reviews

Users

20,000

Type

Extension

Updated

May 6, 2026

Publisher Contextual Analysis

Author: easychenView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

23,447

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

CookieCloud is a tool for syncing browser cookies to a self-hosted server.

CookieCloud is a small tool for syncing cookies to a self-hosted server, which can synchronize the browser's login state to mobile devices and the cloud. It supports end-to-end encryption and allows setting the synchronization interval. The latest version supports local storage synchronization with domain name keyword matching, with a synchronization time of twice the interval time. It requires refreshing the target website page to take effect.

User Growth

Showing data from Jan 22, 2023 to Jan 21, 2024

Versions

No change in user count

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 3 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High3

Medium0

Low0

Versions scanned

Showing 1 of 6 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.1.5 Code review	6

Extension Version	Code Review Findings
0.1.5	6

Files with findings

1 distinct path — top paths by unique finding count:

background.5fadff2f.js6

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	critical	background.5fadff2f.js (line 19097)	Calls chrome.cookies.getAll({}) with an empty filter to enumerate every cookie stored in the browser across all domains, including session/auth cookies for sites the user is signed in to. The result is then handed to …	0.1.5
2	Data Exfiltration	critical	background.5fadff2f.js (line 18976)	Bulk-encrypts the harvested cookies plus all 'LS-' prefixed localStorage entries with AES (key = first 16 chars of MD5(uuid+password)) and POSTs the ciphertext to a fully user-configurable HTTPS endpoint (`endpoint + …	0.1.5
3	Privilege Escalation	critical	background.5fadff2f.js (line 19034)	Fetches an encrypted cookie blob from the remote endpoint and writes every cookie back into the browser via chrome.cookies.set(), preserving httpOnly/secure/sameSite flags. This is functionally session injection / acc…	0.1.5
4	Data Exfiltration	high	background.5fadff2f.js (line 19188)	Schedules a 1-minute persistent alarm that automatically and silently runs the cookie upload (Na) or download/inject (ja) routine against the configured endpoint without any user interaction. Combined with the cookie …	0.1.5
5	Network Interception	high	background.5fadff2f.js (line 19080)	Decrypts attacker-influenced ciphertext from the remote /get/{uuid} endpoint with a key derived only from MD5(uuid + '-' + password) (truncated to 16 chars) and JSON.parses the result. The data is then trusted enough …	0.1.5
6	Unauthorized Data Collection	high	background.5fadff2f.js (line 19211)	On every chrome.alarms tick (every minute) the background worker reads a 'keep_live' setting (a list of URL\|interval pairs) and silently opens each URL in a non-active pinned tab, waits 5 seconds, then closes it. This…	0.1.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No URLs found

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.3 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

chrome浏览器崩溃闪退，怀疑了各种原因，甚至还重装和重置过数据，最后让codex分析才找上这里来

xyz·28 May 2026

chome闪退崩溃，已排查是插件问题，手动点击同步测试，会直接崩溃浏览器

大

大大怪下士·13 May 2026

从夸克浏览器同步到谷歌浏览器，会直接显示error，看调试信息又看不到什么

肖

肖祥龙（晨曦之间）·8 Jan 2026

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

CookieCloud

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 6 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating