Chrome Web Store
4Versions
1Code reviewed

No malware found

In code review (v1.0.3)

Our reviewer read version 1.0.3 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

HP Omni+, used by 3,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages and can observe network requests. It comes from a publisher with 14 extensions and was last updated in September 2026.

Analyst notes

HP Omni+ is a legitimate HP Inc. password manager built with the framework and React. The source code implements standard password manager behavior: form detection and autofill via content scripts (domInteraction.), cryptographic key management for zero-knowledge password storage via WebCrypto in the offscreen document, and a save-success UI component. The only outbound HTTP call is to [domain withheld] for favicon display — a standard password-manager practice. Telemetry sends only the event name, browser type, and a SHA-256 hash of the registered domain (not the full URL, not credentials). All data flows go through chrome.runtime.sendMessage to the background service worker and then via nativeMessaging to the HP Omni+ native app on the user's PC, which is the extension's stated purpose. The ML score was driven by bundle artifacts (large JS size, minifier exclamation patterns, hex bytes in bundler output, fromCharCode in a legitimate uint8ArrayToBase64 helper in) rather than malicious code.

HP Omni+

HP Omni+ Chrome extension security report

ID: lgmaomfmjpeeipfkljbibfpncjfmlobp

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.2.7
Size
5.95 MB
Rating
4.9/5
Reviews
7
Users
3,000
Type
Extension
Updated
Sep 28, 2026
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
14extensions
7 no longer listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Author
HP Inc.
Country
US
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
1501 Page Mill Rd Palo Alto, CA 94304-1126 US
Website
Visit
Extensions
14
Active
6
Obsolete
7
Listed
7
Unlisted
7
Users
2,655,627

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6
Screenshot 7
Screenshot 8
Screenshot 9
Screenshot 10

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
privacy
Permission
Critical
This permission allows modification of Chrome's privacy settings. Rated Critical because it can disable security features, modify network configurations, and compromise browser security settings.
http://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
nativeMessaging
Permission
High
This permission enables communication with applications installed on your computer. Rated High because it can exchange data with native programs, potentially exposing system-level information and local files.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk: • 10% increase: Early script execution enables pre-emptive content manipulation • 25% increase: Unsafe code evaluation capabilities increase attack surface
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

About this extension

HP Omni+ Password Manager extension provides secure, seamless password management built into your HP experience.

Read the publisher’s full description

Free, secure password manager for HP Windows PCs. Sign in quickly and protect your accounts. Too many passwords to keep track of? Every new account means another login to manage, and another reset when you forget. HP Omni+ automatically saves and autofills your passwords as you browse, so you can access your accounts quickly without the extra work. Completely free to use, with no subscription required. This extension works with the free Omni+ app on your HP Windows 11 PC to bring advanced security to your everyday browsing experience. 🔐 Log in quickly Autofill your saved usernames and passwords as you browse, so you can sign in effortlessly without typing. When you have multiple accounts for a site, choose the one you want to use. 📋 Never forget a login Signing up for a new account online? Omni+ saves your credentials as you enter them for future logins. 🔑 Generate strong passwords Create strong, unique passwords for new accounts with the built-in password generator, tailored to each site’s requirements. 🛡️ Security you can trust Your passwords are protected with end-to-end encryption and are only visible to you, never visible to anyone else, not even HP. Only you can access your account using your master password or biometrics like Windows Hello. 📥 Import your passwords easily Already saving passwords in Chrome? Import your saved logins into Omni+ in just a few steps. 🔄 Sync across your HP PCs Your passwords automatically sync across devices linked to your HP account, so they’re available whenever you need them. Add a password on one device and use it on another. 🖥️ Works with the HP Omni+ app This extension works with the HP Omni+ desktop app to save and autofill your passwords as you browse, while the app securely stores them and lets you manage all your saved credentials. This extension requires the HP Omni+ desktop app. Available for HP Windows 11 PCs in the US.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
1.2.7
Latest
5.95 MBNot scanned—
aea9038bf6893c4397e5477cbeb647421f8cbc199d97af3ab2eac1d300358d37
1.2.6
5.95 MBNot scanned—
aea9038bf6893c4397e5477cbeb647421f8cbc199d97af3ab2eac1d300358d37
1.1.9
3.74 MBNot scanned—
301ea01d8a8319d8593bd51bc25771ddcc2bd1301188a5900d133ada1211ff72
1.0.3
3.77 MBNo malware found0
301ea01d8a8319d8593bd51bc25771ddcc2bd1301188a5900d133ada1211ff72
Showing 1 to 4 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from HP Inc.

Store rankings

Where this extension appears in store category, collection and keyword rankings.