Chrome Web Store

21Versions

0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

1610 indicators in this extension

1610 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

What our analysis found

Curateit is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in September 2025.

Curateit Chrome extension security report

ID: hhofkocnlefejficdipgkefgfmnenpbk

Extension Info & Metadata

Status

Active

Version

8.4.1

Size

20.83 MB

Rating

4.9/5

Reviews

Users

308

Type

Extension

Updated

Sep 26, 2025

Publisher Contextual Analysis

Trusted

Author: curateit.com
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

308

Screenshots & videos

Install growth

User Growth

Showing data from Sep 15, 2023 to Sep 13, 2024

Versions

-8.67%(-28 users)

Compared to 3 months ago

11 versions released in this period

Rating Count

Total: 9 ratings

Average Rating

Current: 4.44 / 5.0-0.56

See plans

React Flow

Internal permhash`74819b813f…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Permhash (Mandiant)`af4855a838…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Network indicators

324 URLs and 958 IP literals were extracted from this version.

Item	Type	Severity	Description
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>	Host	Critical	Broad host access — the extension can read/modify content on every website.
https:///	Host	Critical	Broad host access — the extension can read/modify content on every website.
http:///	Host	Critical	Broad host access — the extension can read/modify content on every website.
history	Permission	High	This permission grants access to your complete browsing history. Rated High because it can track all visited websites, reveal sensitive browsing patterns, and expose private information.
browsingData	Permission	High	This permission clears browsing data, history, and redis. Rated High because it can destroy evidence of malicious activity, clear security logs, and modify browser state.
cookies	Permission	High	This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Dangerous Permission Combination: cookies,history,bookmarks	Risk Factor	High	Allows access to location data, personal identifiers, and sensitive browsing information, potentially exposing personal and confidential user data.
Dangerous Permission Combination: browsingData,history,bookmarks	Risk Factor	High	Enables extensions to interact with scripts, modify files and downloads, and alter browsing history and bookmarks, potentially affecting data integrity and user control.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions	Risk Factor	High	This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access	Risk Factor	High	This extension can inject scripts into any website.
activeTab	Permission	Medium	This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage	Permission	Medium	This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
tabGroups	Permission	Medium	This permission manages tab grouping functionality. Rated Medium because it can monitor tab organization, track user workflow patterns, and modify tab relationships.
https://twitter.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://x.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://mobile.twitter.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://development-api.curateit.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://api.curateit.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://api.twitter.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://twitter.com/i/bookmarks	Host	Medium	Host permission — access limited to this URL pattern.
https://twitter.com/*/likes	Host	Medium	Host permission — access limited to this URL pattern.
https://x.com/i/bookmarks	Host	Medium	Host permission — access limited to this URL pattern.
https://x.com/*/likes	Host	Medium	Host permission — access limited to this URL pattern.
https://www.linkedin.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://medium.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://.medium.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://www.reddit.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://github.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://dev-app.curateit.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://curateit.com/	Host	Medium	Host permission — access limited to this URL pattern.
http://localhost:3000/	Host	Medium	Host permission — access limited to this URL pattern.
https://www.youtube.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://play.google.com/*	Host	Medium	Host permission — access limited to this URL pattern.
Access to Sensitive Domains	Risk Factor	Medium	This extension requests access to sensitive domains: https://twitter.com/, https://mobile.twitter.com/, https://api.twitter.com/, https://twitter.com/i/bookmarks, https://twitter.com//likes, https://www.linkedin.com/, https://github.com/, https://play.google.com/*
Early Content Script Execution	Risk Factor	Medium	This extension runs content scripts at document_start.
contextMenus	Permission	Low	This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
search	Permission	Low	This permission accesses search functionality. Rated Low because it only interacts with the browser's search feature without accessing search history.
bookmarks	Permission	Low	This permission manages browser bookmarks and folders. Rated Low because it can only modify bookmark data, which is not sensitive and changes are visible to users.

Sensitive Domain Access

This extension has access to the following sensitive domains:

https://twitter.com/*
https://mobile.twitter.com/*
https://api.twitter.com/*
https://twitter.com/i/bookmarks
https://twitter.com/*/likes
https://www.linkedin.com/*
https://github.com/*
https://play.google.com/*

1610 indicators in this extension

1610 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

About this extension

Introducing CurateIt - the ultimate all-in-one Chrome extension for organizing and saving your favorites.

Read the publisher’s full description

Introducing CurateIt - the ultimate all-in-one Chrome extension for Your Second Brain for AI Research, Productivity and to Showcase your work Organize and save your favorite ideas, articles, and inspirations from across the web. With CurateIt, you can keep track of all the exciting recipes, style ideas, DIY projects, and more, ensuring that you never lose access to the content you love. With CurateIt, you can easily import and connect to various platforms such as Pocket, Raindrop, and Kindle. Save content directly from Twitter, upload bookmarks, and even save highlights from text, images, PDFs, code, and YouTube videos. CurateIt’s extensive list of features includes: 1. Import and Save Features - Import from Pocket - Import bookmarks from Raindrop - Upload bookmarks - Save tweets (bookmarks, likes, tag @savetocurateit) - Save for later (Read later) - Highlight text (like weava, liner) - Save any image like Pinterest - Save Code snippets - Save or download any images - Save or annotate PDFs 2. Organization and Management Features - Bookmark manager - Web clipper - Text Expander - AI Prompts - Spotlight Universal search - Smart search assistant (using Gems & History) - Tabs Manager (like workona, toby) 3. Reading and Accessibility Features - Reader view mode - Dark reader mode - Read aloud (Text-to-speech) - Text Highlights - YouTube highlighter - Import your Kindle highlights 4. Advanced Features and Utilities - Image Screenshot (full page screenshot, select image area or component or annotate) - Image OCR to copy text or code (including language identification and code convert) - Site info on any page (company details, technology stack, brand, traffic, etc.) CurateIt also offers a unique browsing experience with its Spotlight Search and Reader’s View, making it easier to discover content tailored to your interests. Simply hover over an image, code and click to explore save you’re passionate about on CurateIt. Download CurateIt today and experience the convenience and simplicity of this easy-to-use Chrome extension!

User reviews

4.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Great Tool. Was finding a way to store the important stuff i come across in internet, stumbled into Curateit through some blogs. Its Easy to use, packed with features, and saves me tons of time. Highly recommended!

Ankur Sarkar·1 Jan 2025

I absolutely love how useful the CurateIt extension and web platform have been for students like me. I used to struggle a lot with my lessons, especially technical concepts, and would end up relying on endless search results just to understand them. But honestly, retaining the information was a whole different challenge. Since I started using the flashcard and quiz features, not only have I cleared up my concepts, but I’m now able to stay on top of my class. Huge thanks to the CurateIt team for this app – it’s a lifesaver! I highly recommend it to all productivity enthusiasts or anyone who’s short on time but still needs to get work and studying done. And the best part? I’m finally getting my 7 hours of sleep – all thanks to CurateIt. I love, love, LOVE it!

Cheryl K·16 Oct 2024

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

324

IPv4

958

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

1610 indicators in this extension

1610 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

Version	Size	Verdict	Findings	Permhash
8.4.1 Latest	20.83 MB	Not scanned	—	af4855a83831a11fa929af5fe9e799c705b75c6b0226ec913e84cedced3e3275
8.3.5	19.54 MB	Not scanned	—	af4855a83831a11fa929af5fe9e799c705b75c6b0226ec913e84cedced3e3275
7.2.0	15.03 MB	Not scanned	—	af4855a83831a11fa929af5fe9e799c705b75c6b0226ec913e84cedced3e3275
7.0.0	14.98 MB	Not scanned	—	af4855a83831a11fa929af5fe9e799c705b75c6b0226ec913e84cedced3e3275
6.3.0	14.09 MB	Not scanned	—	af4855a83831a11fa929af5fe9e799c705b75c6b0226ec913e84cedced3e3275
6.2.0	14.09 MB	Not scanned	—	af4855a83831a11fa929af5fe9e799c705b75c6b0226ec913e84cedced3e3275
6.1.0	13.89 MB	Not scanned	—	18a46acfa08049eb4acd05ed4751bb6c9ad6b8089effecf14f19026fd624e523
6.0.0	13.81 MB	Not scanned	—	18a46acfa08049eb4acd05ed4751bb6c9ad6b8089effecf14f19026fd624e523
5.1.1	10.75 MB	Not scanned	—	110f3dfb3c4889007b12e74647e7b80cf60e9e93f578f8aa69703f55121fb983
4.1.1	11.83 MB	Not scanned	—	422826f188ad340ee79b1e11cf82087203ac9f89b07255630a6a90a2d78f20fd

Showing 1 to 10 of 30 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Not reviewed

1610 indicators in this extension

What our analysis found