Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Instant Incognito

CRITICAL RISKRemoved from Chrome Web Store

Instant Incognito

ID: nmpkielhmiedcangemghlabbhadpmkij

Could be malicious

Supported Languages

🇸🇦Arabic

🇧🇩Bengali

🇧🇬Bulgarian

🇪🇸Catalan

🇭🇷Croatian

🇨🇿Czech

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇮🇳Kannada

🇰🇷Korean

🇱🇻Latvian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇮🇷Persian

🇷🇸Serbian

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.0.0

Size

0.44 MB

Rating

5.0/5

Reviews

Users

Type

Extension

Updated

Apr 18, 2024

Publisher Contextual Analysis

Trusted

Author: Coffee & Fun LLCView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

14,373

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Automatically opens specific websites in incognito mode for privacy-focused browsing.

Instant Incognito makes your browsing experience better by automatically opening certain websites in incognito mode, ensuring that your browsing habits remain private. Key Features: Automatic Incognito Launch: Automatically open your favorite or frequently visited sites in incognito mode. Privacy by Design: Keeps your browsing sessions private, ensuring that no cookies, history, or temporary files are saved. Lightweight and Unobtrusive: Runs quietly in the background with minimal resource usage, so your browser stays fast and responsive. Why Instant Incognito? With Instant Incognito, you're just a click away from secure, private browsing sessions. Whether you're checking confidential information, accessing sensitive sites, or just prefer to keep your browsing history clean, Instant Incognito is the tool for you. Our extension is designed with a focus on user privacy, ease of use, and efficiency, making it an essential add-on for any Chrome user. Get Started: 1. Add the extension to Chrome. 2. Open the extension 3. List the websites you want to launch in incognito mode. 4. Toggle Running to On. Enjoy secure, private browsing automatically! Support: Have questions or feedback? We are committed to continuous improvement and user satisfaction. Contact us anytime for support or suggestions. Made by Coffee & Fun LLC

User Growth

Showing data from Apr 19, 2024 to Apr 03, 2026

Versions

-1.64%(-1 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 2 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium2

Low1

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0 Code review	5

Extension Version	Code Review Findings
1.0.0	5

Files with findings

1 distinct path — top paths by unique finding count:

scripts/popup.js5

S.No.	Category	Severity	File	Summary	Found in Version
1	Obfuscation	high	scripts/popup.js (line 15584)	The user's email is AES-encrypted client-side with a hard-coded key ('7xaDBh5Dk2dQhYar54cNAVzAwlZQ7Wll'), Base64/Hex-encoded, and shipped to `engine.helperbird.app/api/v1/cappuccino/paid`. Hard-coded symmetric keys ar…	1.0.0
2	Unauthorized Data Collection	high	scripts/popup.js (line 15306)	The extension harvests the signed-in Chrome user's Google account email via chrome.identity.getProfileUserInfo. This identifier is then transmitted to a remote server (see findings below). The `identity` permission is…	1.0.0
3	Data Exfiltration	medium	scripts/popup.js (line 14959)	Generic POST helper used to transmit payloads (including the user's email and subscription token) to the remote API `https://engine.helperbird.app/` (see yh.API_URL at line 13981). The destination is a third-party Saa…	1.0.0
4	Tracking	medium	scripts/popup.js (line 13981)	The extension — marketed as 'Instant Incognito' with only webNavigation/tabs/storage/sidePanel permissions — ships subscription/account logic for a separate product ('Helperbird') that POSTs the user's Google email an…	1.0.0
5	Code Injection	low	scripts/popup.js (line 13977)	Uses the `new Function()` constructor to compile and execute dynamically generated code strings at runtime. Although this is part of Vue's runtime template compiler, it bypasses CSP 'unsafe-eval' expectations and prov…	1.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/1998/Math/MathML	http://www.w3.org/1998/Math/MathML
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/xhtml	http://www.w3.org/1999/xhtml
*	/*	http:///
*	/*	https:///
tailwindcss.com	/n///n1.	https://tailwindcss.com\n//\n1.
github.com	/mozdevs/cssremedy/issues/4	https://github.com/mozdevs/cssremedy/issues/4
github.com	/tailwindcss/tailwindcss/pull/116	https://github.com/tailwindcss/tailwindcss/pull/116
bugzilla.mozilla.org	/show_bug.cgi	https://bugzilla.mozilla.org/show_bug.cgi?id=190655
bugs.chromium.org	/p/chromium/issues/detail	https://bugs.chromium.org/p/chromium/issues/detail?id=999088,

Showing 1 to 10 of 40 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

5.0 out of 5 · 1 most recent review

Text reviews

Positive

Negative

Seems to work well

Peter Jetson·5 Apr 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Instant Incognito

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating