What our analysis found

Fyxit AI | Instant Tech Support & WiFi Speed Test, used by 40,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can read and change data on all websites and can inject scripts into pages.

Key findings

• high· other —The bundled does not include the permissions 'cookies', 'webRequest', 'webNavigation', 'browsingData' and 'system.storage' that are present in the published Chrome Web Store listing. This discrepancy suggests a potential post-review permission escalation or version mismatch; permissions like webRequest could be used for traffic interception. The presence of these permissions in the live listing but absence in the analyzed code is a security concern.

The extension's functionality aligns with its description as a speed test and AI tech support tool. All network requests go to the publisher's own domain () and the disclosed data collection categories (personally identifiable information, authentication, location, user activity) are consistent with the code. The large JS bundle is standard bundler output, not obfuscation. The permission mismatch (bundled manifest lacks present in the published listing) is a finding, but no actual malicious behavior was found in the reviewed code. The ML model likely overfit on broad permissions and high HTTP request counts that are inherent to this extension's legitimate purpose.