Chrome Web Store
2Versions
1Code reviewed

No malware found

In code review (v1.0.25)

Our reviewer read version 1.0.25 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

10 indicators in this extension

10 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

HLS Downloader (MP4), used by 10,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites, can inject scripts into pages and can observe network requests. It comes from a trusted publisher and was last updated in July 2026.

Analyst notes

All source code is consistent with the stated purpose of an HLS video downloader using. The webRequest listener at:626-642 only filters for `.m3u8` URL patterns and stores them locally; no data is transmitted to any external server. The MAIN-world hook in:32-44 only posts a `window.postMessage` when a `.m3u8` URL is detected, calls the original fetch unchanged, and captures no response data — a standard HLS detection technique. All network activity is directed at the user's own video CDN. The ML signal is corroborated only by permission breadth and wasm usage, both of which are fully justified by the declared functionality; the clean permhash cluster (0% malware) and low ML score (0.18) further contradict malicious intent. Third-party risk score's high-likelihood flags are entirely new-extension signals (age, user count), not behavioral evidence.

HLS Downloader (MP4)

HLS Downloader (MP4) Chrome extension security report

ID: lbpgfcokjachapdhjpaffgbbgemmfjig

Extension Info & Metadata

Status
Active
Version
1.1
Size
10.46 MB
Rating
1.7/5
Reviews
10
Users
10,000
Type
Extension
Updated
Jul 17, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
2extensions
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
5ufvpn.com
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
2
Active
2
Obsolete
0
Listed
2
Unlisted
0
Users
12,000

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 25% increase: Unsafe code evaluation capabilities increase attack surface
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
windows
Permission
Unknown
No classification available for this permission.

10 indicators in this extension

10 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Detect m3u8 on web pages. Merge segments in the browser: export TS when over ~1.5GB, otherwise MP4 (ffmpeg.wasm).

Read the publisher’s full description

【 Summary】 Detect and download m3u8/HLS videos. Supports ultra-large file merging with perfect audio-video sync. Free bonus tool from 5UF VPN. 【Description】 HLS Downloader (MP4) is a powerful browser extension designed to detect, download, and merge HTTP Live Streaming (m3u8) video playlists directly within your browser, eliminating the need for bulky desktop software. As an exclusive bonus product of 5UF VPN, this premium tool is 100% FREE for everyone! 🚀 Key Advantages (Why Choose Us?) Seamless Large File Merging: While most competitors crash or fail when handling large streams, our tool excels. It utilizes advanced memory management and ffmpeg.wasm. Files under ~1.5GB are exported as fast-start MP4s, while larger files seamlessly transition to MPEG-TS (.m2ts) or direct local storage, bypassing browser quota limits. Perfect Audio-Video Sync: Fed up with downloaded videos where the audio is out of sync? We have solved this industry-wide headache. Our optimized timestamp alignment perfectly multiplexes separate video and audio HLS renditions, ensuring flawless playback. Broad Website Compatibility: Supports the vast majority of video platforms utilizing HLS/m3u8 streaming, making it your ultimate web media companion. Dual Detection Modes: Automatic: Sniffs and lists active streams as you browse, auto-populating URL bars for instant downloads. Manual: Allows you to paste any m3u8 playlist URL manually for advanced resolution parsing. 🛠 Advanced Features Quality Selection: Automatically parses the Master Playlist, letting you choose your preferred resolution and bitrate. File names include quality tags for easy management. Handle Auth & Region Locks: For protected or region-restricted content, simply enable "Use Page Cookies" and keep the playback tab open to download using your active session. Save your favorite web videos in high quality without any hassle!

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
8
IPv4
2

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

10 indicators in this extension

10 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.1
Latest
10.46 MBNot scanned—
9ac8ca969121195ebf18184743da6f92471404f699c3c962792c0592ff3ca285
1.0.25
10.45 MBNo malware found0
345508c55e9ea753502f2552ba64be52207fdcc3a84b5fe07f06142e639e7c0a
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from 5ufvpn.com

Popular in Tools

Store rankings

Where this extension appears in store category, collection and keyword rankings.