Documents Downloader

On click, the extension reads the active tab's full URL (a scribd.com document URL) and forwards it as a query parameter to a third-party Cloudflare Pages site (documents-downloader.pages.dev). The destination is on a free, unattributed hosting domain rather than a verified publisher domain, and the transmitted URL is not sanitized — any query string, fragment, or session-bearing token in the address would be exfiltrated alongside it.

chrome.action.onClicked.addListener(async (tab) => {  const {    url  } = await getCurrentTab();  chrome.tabs.create({    url: `https://documents-downloader.pages.dev/?documentUrl=${url}`,    active: true,  });});

Extension activates only on scribd.com document pages, then funnels the URL to an external service. This narrowly-scoped piggybacking on a content site to siphon document URLs is a common pattern for grey-area scrapers/affiliate redirectors, though here it is consistent with the extension's stated purpose of downloading scribd documents.

chrome.declarativeContent.onPageChanged.removeRules(undefined, async () => {        let exampleRule = {            conditions: [              new chrome.declarativeContent.PageStateMatcher({                pageUrl: {                  hostSuffix: ".scribd.com",                  urlContains: "doc",                },              }),            ],