Chrome Web Store
10Versions
1Code reviewed

Caution required

Suspicious in code review (v1.0.1)

Our reviewer found behaviour consistent with malware in version 1.0.1, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

9 indicators in this extension

9 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Free TG Media Saver for Telegram Web, used by 10,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in July 2026.

Key findings

  • High

    Other

    The bundled declares no permissions at all, yet the live CWS listing for this same version shows storage, activeTab, scripting, and optional tabs. In MV3, scripting permission allows programmatic injection of scripts into any matching page; its absence in the bundle but presence in the live listing indicates a discrepancy between the submitted ZIP and the listing metadata — a common indicator of a delayed-update attack or version mismatch. The CWS live listing additionally exposes web_accessible_resources to [domain withheld] and [domain withheld] which are entirely absent from the bundled manifest, despite no Telegram-handling code existing in the bundle.

Analyst notes

The bundled source code is functionally clean — reads VK player's internal window.mvcur.player.vars to surface download links, no external data exfiltration or tracking observed. However, the bundled declares zero permissions while the live CWS listing declares storage, activeTab, scripting, and optional tabs; additionally the live listing exposes web_accessible_resources to [domain withheld] and [domain withheld] which are absent from the bundle entirely. This manifest divergence means the extension may be running with a different permission set than what the submitted ZIP reflects. The publisher's 22% malicious-extension rate across their portfolio and a CWS-listed privacy policy URL pointing to a different product ([domain withheld]) rather than the publisher's own [domain withheld] domain further elevate suspicion without proving malice.

Free TG Media Saver for Telegram Web

Free TG Media Saver for Telegram Web Chrome extension security report

ID: npabddfopfjjlhlimlaknekipghedpfk

Supported Languages

🇸🇦Arabic
🇧🇩Bengali
🇧🇷Brazilian Portuguese
🇬🇧British English
🇧🇬Bulgarian
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇭🇷Croatian
🇨🇿Czech
🇩🇰Danish
🇺🇸English
🇪🇪Estonian
🇵🇭Filipino
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇬🇷Greek
🇮🇳Gujarati
🇮🇱Hebrew
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇲🇽Latin American Spanish
🇱🇻Latvian
🇱🇹Lithuanian
🇲🇾Malay
🇮🇳Malayalam
🇮🇳Marathi
🇳🇴Norwegian
🇮🇷Persian
🇵🇱Polish
🇵🇹Portuguese
🇷🇴Romanian
🇷🇺Russian
🇷🇸Serbian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇮🇳Tamil
🇮🇳Telugu
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇺🇸US English
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
1.2.0
Size
0.39 MB
Rating
4.7/5
Reviews
324
Users
10,000
Type
Extension
Updated
Jul 21, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
10extensions
2 no longer listed

Publisher Contextual Analysis

Trusted
Author
https://vidsaver.io/
Website
Visit
Extensions
10
Active
8
Obsolete
2
Listed
10
Unlisted
0
Users
63,054

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.

9 indicators in this extension

9 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Download VK videos in the best quality in just one click. vk Video Downloader is a simple and safe way to download videos from VK.

Read the publisher’s full description

Downloading videos from VK has become easy! Download your favorite clips and videos easily and conveniently. This completely free extension allows you to download video files from VK. With our VK Video Downloader extension, anyone can download a high-quality video in one click and just a few seconds from vk.com. How the extension works on VK: - Go to the social network VK (vk.com). - Download buttons will appear down to each video watch page title. - Click the Download button to save your favorite video to your PC. 💬 Telegram video downloader features: ✓ Save audio/video from any channel/group to a local computer. ✓ Support downloading videos/pictures/photos/GIFs/music/audiobooks ✓ Save audio/video in restricted channels/groups to local computer. With our VK Video Downloader extension, you can download free videos and watch your favorite videos without restrictions. This extension is an unofficial app that is developed and maintained independently. If you find an error, please report it in the comments section and corrective action will be taken as soon as possible. We will also be happy to hear ideas for adding new features to VK Video Downloader. Enjoy watching to your favorite video without any restrictions offline.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
9

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

9 indicators in this extension

9 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.2.0
Latest
0.39 MBNot scanned—
43990a5002d66e8f943be6a9d9bbc2b15179138c05bd48123db8e9416ef16abd
1.0.9
0.41 MBNot scanned—
d7c38b056f1ceba4a05751695e3e6ddf01f8a4689d5659ae1e7cd8abbfdd0c8c
1.0.5
0.39 MBNot scanned—
43990a5002d66e8f943be6a9d9bbc2b15179138c05bd48123db8e9416ef16abd
1.0.4
0.38 MBNot scanned—
43990a5002d66e8f943be6a9d9bbc2b15179138c05bd48123db8e9416ef16abd
1.0.2
0.38 MBNot scanned—
43990a5002d66e8f943be6a9d9bbc2b15179138c05bd48123db8e9416ef16abd
1.0.1
0.05 MBCaution0N/A
1.0.0
0.05 MBNot scanned—N/A
1.0.8
0.41 MBNot scanned—
d7c38b056f1ceba4a05751695e3e6ddf01f8a4689d5659ae1e7cd8abbfdd0c8c
1.0.7
0.41 MBNot scanned—
d7c38b056f1ceba4a05751695e3e6ddf01f8a4689d5659ae1e7cd8abbfdd0c8c
1.0.6
0.41 MBNot scanned—
d7c38b056f1ceba4a05751695e3e6ddf01f8a4689d5659ae1e7cd8abbfdd0c8c
Showing 1 to 10 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.