What our analysis found

Foxified, used by 1,000,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in August 2026.

The extension provides a sandbox to emulate Firefox extensions, requiring broad permissions and script injection as core functionality. All reviewed code (offscreen, sandbox, store integration) shows no unauthorized data collection or malicious network calls. Communication is limited to the extension's own origin and the Firefox add-ons store for functionality. The publisher is trusted, the extension has a long history and high user rating, and the disclosed data collection is 'none' in the Chrome Web Store. User complaints about ads or security issues likely stem from guest extensions loaded through the sandbox, not from the host extension itself. The ML model's low score (0.00) and the absence of any obfuscation or hidden endpoints support a benign verdict.