Chrome Web Store
43Versions
1Code reviewed

No malware found

In code review (v3.10.1)

Our reviewer read version 3.10.1 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Hoxx VPN Proxy, used by 700,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can read and change data on all websites and can observe network requests.

Key findings

  • high· other —The bundled manifest uses manifest_version 2 and includes webRequestBlocking, while the live Chrome Web Store listing shows manifest_version 3 with declarativeNetRequest and alarms. This mismatch may indicate an outdated bundle or an inconsistent update, potentially missing security improvements of MV3.

The extension is a VPN with a long history, high user count, and high ratings. The powerful permissions (proxy, webRequest, webRequestBlocking, <all_urls>) are necessary for VPN functionality and are disclosed. The provided source code ( and HTML views) contains no malicious behavior. However, core scripts (,) are missing, limiting full verification. The manifest version mismatch (bundled MV2 vs CWS listing MV3) is flagged as a finding, but the extension's purpose and reputation strongly suggest it is benign.

Hoxx VPN Proxy

Hoxx VPN Proxy Chrome extension security report

ID: nbcojefnccbanplpoffopkoepjmhgdgh

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
3.50.6
Size
2.19 MB
Rating
4.6/5
Reviews
26,364
Users
700,000
Type
Extension
Updated
Jan 20, 2025
Category
Social networking
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
Hoxx Inc.
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
700,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 2
Screenshot 3

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
proxy
Permission
Critical
This permission allows the extension to control the browser's proxy settings. Rated Critical because it can route all traffic through potentially malicious proxies, enabling man-in-the-middle attacks and traffic monitoring.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
webRequestAuthProvider
Permission
Critical
This permission allows the extension to handle authentication requests and modify authentication headers. Rated Critical because it can intercept login credentials, session tokens, and modify authentication flows to compromise accounts.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 25% increase: Unsafe code evaluation capabilities increase attack surface
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
management
Permission
Medium
This permission manages other installed extensions. Rated Medium because it can enable/disable other extensions and modify their settings, with changes being visible to users.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

About this extension

Hoxx VPN Proxy service to unblock blocked websites and encrypt your connection.

Read the publisher’s full description

Hoxx VPN Service can be used to bypass filtered or blocked websites that have been blocked by your government or school. You can also use Hoxx VPN to hide your tracks and/or protect your personal information at public Wi-Fi locations. Did you know that public Internet locations are dangerous for your personal data? Bad people around you, on the same network can sniff out your personal information. This is possible because you are on the same network and you are supposed to trust each other. Why don’t you use hoxx to resolve this issue? Our VPN Servers can solve this problem for you with a few simple clicks. All you need is a hoxx account and this plugin and you are good to go. We have over 100 servers all over the world. Unlock sites within seconds, take care of your Internet privacy, change your location, and get protection from malicious websites. No special configuration is required; all you need is a valid hoxx account and you can get started immediately. We do encrypt all your connections from browser to target site to prevent anyone from stealing your personal information, this also prevents other people from knowing what you are doing. Enjoy our VPN service. Hoxx VPN Proxy requires following permissions: storage: To store configuration file and current state of the extension proxy: This permission allows Hoxx VPN to proxy your traffic through a server in another country and unblocks blocked websites in your area. notifications: Keeps the user informed whether its connection was successful or not. Additionally notifies the user when it disconnects from a server. webRequest, webRequestBlocking, AllHosts: Hoxx VPN checks every web request and uses Proxy-Authorization to authorize your access to the proxy server. It also helps to detect connection errors, warns the user and ensures a good user experience. tabs: To open our support and extension related websites and populate their content. To ensure support for the user and help to solve problems related to the extension much faster. It also helps to detect on which tabs connection errors have happened. The error detection is just informational and ensures a higher user experience. management: To detect extensions that might affect the usage of Hoxx VPN Proxy and warns the user. It does not disable or enable your extensions. It's only informational and ensures a good user experience by informing the user..

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
65
IPv4
372

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Version
Size
Verdict
Findings
Permhash
3.50.5
Latest
2.19 MBNot scanned—
9293561239c03d6ccabd3c5276aa9bd648cb9257f29aa7cd8b9205179a662af4
3.50.4
2.18 MBNot scanned—
9293561239c03d6ccabd3c5276aa9bd648cb9257f29aa7cd8b9205179a662af4
3.50.3
2.18 MBNot scanned—
9293561239c03d6ccabd3c5276aa9bd648cb9257f29aa7cd8b9205179a662af4
3.50.2
2.18 MBNot scanned—
9293561239c03d6ccabd3c5276aa9bd648cb9257f29aa7cd8b9205179a662af4
3.50.1
2.18 MBNot scanned—
9293561239c03d6ccabd3c5276aa9bd648cb9257f29aa7cd8b9205179a662af4
3.50.0
2.18 MBNot scanned—
9293561239c03d6ccabd3c5276aa9bd648cb9257f29aa7cd8b9205179a662af4
3.11.35
3.27 MBNot scanned—
34d8077b75305a84242e085f3cac259f4924e4d1cbd5c5757b156bea64011ec0
3.11.34
3.27 MBNot scanned—
34d8077b75305a84242e085f3cac259f4924e4d1cbd5c5757b156bea64011ec0
3.11.33
3.27 MBNot scanned—
34d8077b75305a84242e085f3cac259f4924e4d1cbd5c5757b156bea64011ec0
3.11.32
3.56 MBNot scanned—
34d8077b75305a84242e085f3cac259f4924e4d1cbd5c5757b156bea64011ec0
Showing 1 to 10 of 50 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Social Networking