Extension Auditor
Sign Up
Chrome Web Store
1Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

173 indicators in this extension

173 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Downloader for Mindvalley is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages and can observe network requests. It comes from a publisher with 10 extensions and was last updated in March 2026.

Downloader for Mindvalley

Downloader for Mindvalley Chrome extension security report

ID: bbhglfjoabemjalncmancejjapeajoin

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
4.0.1
Size
1.47 MB
Rating
0.0/5
Reviews
0
Users
86
Type
Extension
Updated
Mar 29, 2026
Category
Education
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue
This publisherTrack record
10extensions
All still listed

Publisher Contextual Analysis

Author
SERP Apps
Privacy
Privacy Policy
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Extensions
10
Active
10
Obsolete
0
Listed
10
Unlisted
0
Users
1,189

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
declarativeNetRequestWithHostAccess
Permission
Critical
This permission combines network request modification with host permissions. Rated Critical because it can modify requests for specific domains, potentially targeting sensitive websites with precise attack rules.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Dangerous Permission Combination: scripting,cookies,webRequest
Risk Factor
High
Enables extensions to interact with scripts, modify files and downloads, and alter browsing history and bookmarks, potentially affecting data integrity and user control.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
https://api.github.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://auth.serp.co/*
Host
Medium
Host permission — access limited to this URL pattern.
https://vimeo.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.vimeo.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.vimeocdn.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.cloudfront.net/*
Host
Medium
Host permission — access limited to this URL pattern.
https://unpkg.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://api.gumroad.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://player.vimeo.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.loom.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.loom.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.loomcdn.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.youtube.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.youtube.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://youtu.be/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.googlevideo.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.googleapis.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://wistia.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.wistia.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://wistia.net/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.wistia.net/*
Host
Medium
Host permission — access limited to this URL pattern.
https://fast.wistia.net/*
Host
Medium
Host permission — access limited to this URL pattern.
https://fast.wistia.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://mindvalley.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.mindvalley.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://otfp.mindvalley.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://api.github.com/*, https://*.googlevideo.com/*, https://*.googleapis.com/*

173 indicators in this extension

173 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Download videos from Mindvalley. Supports downloading HLS (.m3u8) streams plus loom, vimeo, wistia embeds.

Read the publisher’s full description

Download videos from Mindvalley courses, quests, and masterclasses for offline learning. SERP Mindvalley Downloader for Chrome detects videos on Mindvalley.com and downloads them as MP4 files. It automatically recognizes Mindvalley's native HLS streams plus embedded Vimeo, YouTube, Loom, and Wistia videos — each handled by a dedicated detection and download engine. Built on Manifest V3 for Chrome's latest extension platform and available on the Chrome Web Store. Navigate to any quest lesson or masterclass on Mindvalley.com, press play on the video, and click the extension icon. The popup shows available quality options pulled directly from the HLS master playlist or embedded player API. Choose your preferred resolution, hit Download, and the video saves as a standard MP4 file to your Downloads/Mindvalley/ folder. ✅ Automatic HLS stream detection from Mindvalley's native player using Performance API monitoring and fetch/XHR interception ✅ Converts HLS streams to standard MP4 files entirely in your browser — no external software or command-line tools ✅ Multi-platform embed support: dedicated handlers for Vimeo, YouTube, Loom, and Wistia videos on Mindvalley pages ✅ Quality selector with all available resolutions from the HLS master playlist or embedded player ✅ In-page download manager with real-time progress bars, download speed display, and auto-organized file saving ✅ 3 free trial downloads after email sign-in — no credit card required to get started HOW TO USE 1. Install SERP Mindvalley Downloader from the Chrome Web Store 2. Go to Mindvalley.com and open any course lesson, quest video, or masterclass 3. Press play on the video so the extension can detect the HLS stream 4. Click the extension icon and select your preferred quality 5. Hit Download — your video saves as MP4 PERFECT FOR — Saving Mindvalley quest lessons and masterclass videos for offline study during travel or commutes — Downloading embedded Vimeo, YouTube, or Loom recordings found on Mindvalley course pages — Building a personal library of course content you have access to for review at your own pace 3 free downloads included after email sign-in -- no credit card required. Upgrade to a license at serp.ly/mindvalley-downloader for unlimited downloads. $97/month. Users are responsible for ensuring they have the right to download content. This extension is intended for downloading content you own or have permission to download. A valid Mindvalley membership is required to access course content.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up
URLs
156
IPv4
16

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

173 indicators in this extension

173 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
4.0.1
Latest
1.47 MBNot scanned—
dcfe65bf63680ff75869f0e3fa40ad3dabdd99242f0dd309996cd5b8fb89f772
Showing 1 to 1 of 10 rows
Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up