Chrome Web StoreDo not install
Code review: critical (v4.1.0)
Our reviewer read version 4.1.0 of this extension and confirmed malicious behaviour. 3 security findings documented below. Do not install it. Remove it if you already have it.
9 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Download manager integration checklist, used by 70,000 people, is rated malicious by Extension Auditor. Our code review reported 3 findings (1 critical, 2 high), led by code injection. It comes from a trusted publisher and was last updated in February 2025.
Key findings
- Critical
Code Injection
The background service worker injects a function 'f' via chrome.scripting.executeScript into every page on load. The injected function reads locally stored checklist data (fetched from a remote server) and sets attributes on the page's document element, dispatching custom events. This allows remote-controlled code injection into any website, enabling arbitrary DOM manipulation or data exfiltration.
- High
Other
The published CWS manifest summary lists only 'storage' permission, but the actual manifest includes 'alarms', 'declarativeNetRequestWithHostAccess', 'scripting', and host_permissions '<all_urls>'. This mismatch indicates the extension is hiding its full capabilities from users and reviewers.
- High
Network Interception
The extension fetches a JSON checklist from a remote server and uses it to update dynamic declarativeNetRequest rules and local storage. This allows the remote server to control network request modifications on any website, bypassing Chrome Web Store review. Combined with broad host permissions, this can be exploited for traffic interception or malicious redirects.
Analyst notes
The extension falsely advertises as an IDM integration checklist but contains code to inject scripts into every page and dynamically update network rules from a remote server. The constant data inside the extension is unrelated to IDM (YouTube Shorts guide), indicating deceptive intent. The published CWS manifest hides critical permissions. These behaviors are characteristic of a malicious or potentially unwanted extension.
Download manager integration checklist Chrome extension security report
ID: ghkcpcihdonjljjddkmjccibagkjohpi
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Merin
- Privacy
- Privacy Policy
Email Change History
Screenshots & videos
Install growth
9 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Effective solution to seamlessly integrate Internet Download Manager (IDM) with Google Chrome manually
Read the publisher’s full description
Already Download & Install IDM (Internet Download Manager) on PC but IDM Download Panel does not Pop-up than you need to Integration IDM Extension to your Browser. And in this process this extension will help you to Install the Internet Download Manager Extension in your favorite browser. Because there are so many FAKE IDM Integration Module available on the web. And if you mistakenly add any of them in your browser then you can face problems. So, IDM Integration Module (IDM Extension) will tell you the working, latest and simple ways to Integrate IDM (Internet Download Manager) Extension with Different Browsers. Disclaimer:- All Logos & Trademarks Belongs To Their Respective Owners.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
9 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in Education
- Google Translate39,000,000 users
- Equatio - Math made digital5,000,000 users
- EndNote Click4,000,000 users
- Smoothwall Safeguarding Client (Global)3,000,000 users
- Eduphoria LockDown Browser3,000,000 users