Chrome Web Store

21Versions

1Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.

40 indicators in this extension

40 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

What our analysis found

JetBrains Toolbox Extension, used by 90,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in August 2025.

Analyst notes

The extension is developed by JetBrains, a trusted developer tools company, and its code strictly implements the advertised functionality (adding buttons to projects in JetBrains IDEs from repository pages). No data is exfiltrated; all network requests are to the repository hosting platforms to fetch metadata for the purpose of cloning. The permissions are necessary for the extension's operation. The ML model likely flagged it due to broad host permissions and the use of 'scripting', but these are used responsibly. The extension matches its CWS disclosure (no data collected) and publisher's privacy policy.

JetBrains Toolbox Extension Chrome extension security report

ID: offnedcbhjldheanlbojaefbfbllddna

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

3.0.0.53847

Size

0.27 MB

Rating

3.8/5

Reviews

120

Users

90,000

Type

Extension

Updated

Aug 27, 2025

Publisher Contextual Analysis

Trusted

Author: JetBrains s.r.o
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

92,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Install growth

User Growth

Showing data from Sep 10, 2023 to Sep 08, 2024

Versions

No change in user count

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 119 ratings

Average Rating

Current: 3.86 / 5.0-0.04

See plans

React Flow

Internal permhash`c18c61f5f0…`
No malicious matches

2 other extensions carry this fingerprint, none of them known malicious.

Withheldnot flagged
Withheldnot flagged

Permhash (Mandiant)`1ca6029615…`
Too common to be evidence

230 other extensions carry this fingerprint, 6 of them known malicious. A permission set this common is not evidence on its own; the most installed members are listed for reference.

Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldnot flagged
+223 more

Network indicators

23 URLs and 0 IP literals were extracted from this version.

Item	Type	Severity	Description
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
activeTab	Permission	Medium	This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://github.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://gitlab.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://bitbucket.org/*	Host	Medium	Host permission — access limited to this URL pattern.
https://gitee.com/*	Host	Medium	Host permission — access limited to this URL pattern.
Access to Sensitive Domains	Risk Factor	Medium	This extension requests access to sensitive domains: https://github.com/, https://gitlab.com/, https://bitbucket.org/*
contextMenus	Permission	Low	This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

Sensitive Domain Access

This extension has access to the following sensitive domains:

https://github.com/*
https://gitlab.com/*
https://bitbucket.org/*

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

Data Exfiltration
Code review completed; no malicious patterns detected for this category.
Unauthorized Data Collection
Code review completed; no malicious patterns detected for this category.
Network Interception
Code review completed; no malicious patterns detected for this category.
Code Injection
Code review completed; no malicious patterns detected for this category.
Credential Theft
Code review completed; no malicious patterns detected for this category.
Obfuscation
Code review completed; no malicious patterns detected for this category.
Tracking
Code review completed; no malicious patterns detected for this category.
Privilege Escalation
Code review completed; no malicious patterns detected for this category.
Phishing
Code review completed; no malicious patterns detected for this category.
Remote Code Loading
Code review completed; no malicious patterns detected for this category.
Other
Code review completed; no malicious patterns detected for this category.

40 indicators in this extension

40 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

About this extension

Clone and open projects from GitHub, GitLab, Gitee, and Bitbucket in JetBrains IDEs right from your browser

Read the publisher’s full description

The extension adds buttons that allow you to clone and open projects from GitHub, GitLab, Gitee, and Bitbucket in IntelliJ-based IDEs. Note: The Toolbox App must be installed on your computer to make the extension work. Download the Toolbox App from https://www.jetbrains.com/toolbox-app. To open the projects from self-hosted GitHub, GitLab, and Bitbucket instances, make sure to enable the extension for your website by ticking “Enable on this domain” in the extension settings menu. If you encounter any problem using the extension, please create an issue request at our tracker: https://youtrack.jetbrains.com/issues/TBX Would you like to collaborate on the extension? Because you can! It's an open-source project. Here is the repository address: https://github.com/JetBrains/toolbox-browser-extension

User reviews

3.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

It can’t be used as it is right now. The extension automatically detects the language used in the GitLab project and then suggests an IDE. For example, with my Terraform project, it only suggests IntelliJ IDEA. However, I don’t have IntelliJ IDEA—just WebStorm and PhpStorm. I’d like the extension to only suggest IDEs that I actually have installed. It would be great if there was an option in the settings to let users select which IDEs they have. In my case, I want to be able to checkout projects using WebStorm or PhpStorm, regardless of the project’s language.

Tegomass·19 Apr 2025

We invite you to join us in our partnership to expand your revenue and grow your chrome extension. Let's explore how we can help you. Learn more at: https://extensionbuysell.com Looking forward to working with you!

Madison Francis·16 Sept 2024

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

40 indicators in this extension

40 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

Version	Size	Verdict	Findings	Permhash
3.0.0.53847 Latest	0.27 MB	No malware found	0	1ca6029615b0d60c2b597e2c043464f5840a37a9ecd99941056ad519d760874a
2.6.0.36264	0.24 MB	Not scanned	—	1ca6029615b0d60c2b597e2c043464f5840a37a9ecd99941056ad519d760874a
2.6.0.35738	0.24 MB	Not scanned	—	1ca6029615b0d60c2b597e2c043464f5840a37a9ecd99941056ad519d760874a
2.6.0.35673	0.24 MB	Not scanned	—	1ca6029615b0d60c2b597e2c043464f5840a37a9ecd99941056ad519d760874a
2.6.0.35423	0.24 MB	Not scanned	—	1ca6029615b0d60c2b597e2c043464f5840a37a9ecd99941056ad519d760874a
2.4.0.31200	0.27 MB	Not scanned	—	1ca6029615b0d60c2b597e2c043464f5840a37a9ecd99941056ad519d760874a
2.3.0.20092	0.28 MB	Not scanned	—	1805896c4a7e15febfa68faf0989adb828cbd695d26e683cede0ddb8cbcb7182
2.3.0.20051	0.28 MB	Not scanned	—	1805896c4a7e15febfa68faf0989adb828cbd695d26e683cede0ddb8cbcb7182
1.28.0.14810	0.20 MB	Not scanned	—	7122c3edf79ba49e570fe9f22b411961074b44d0ec09a36423436998e6d93393
1.28.0.14629	0.20 MB	Not scanned	—	7122c3edf79ba49e570fe9f22b411961074b44d0ec09a36423436998e6d93393

Showing 1 to 10 of 30 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Developer Tools

GoFullPage - Full Page Screen Capture11,000,000 users
touchenex 확장8,000,000 users
TrendAI™ Toolbar for Enterprise7,000,000 users
SentinelOne6,000,000 users
React Developer Tools5,000,000 users

No malware found

40 indicators in this extension

What our analysis found

JetBrains Toolbox Extension Chrome extension security report

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Screenshots & videos

Install growth

User Growth

Rating Count

Average Rating

Threat relationships

Internal permhashc18c61f5f0…No malicious matches

Permhash (Mandiant)1ca6029615…Too common to be evidence

Network indicators

Security analysis

Manifest File Security Analysis

Sensitive Domain Access

Code Analysis

40 indicators in this extension

Store listing & files

About this extension

User reviews

User Reviews

Extension files

Network indicators

URLs

40 indicators in this extension

Versions & changes

Version History

Code Diff

Related extensions

More from JetBrains s.r.o

Popular in Developer Tools

User Growth

Rating Count

Average Rating

User Reviews

Threat relationships

Internal permhashc18c61f5f0…No malicious matches

Permhash (Mandiant)1ca6029615…Too common to be evidence

Network indicators

Internal permhash`c18c61f5f0…`
No malicious matches

Permhash (Mandiant)`1ca6029615…`
Too common to be evidence

Internal permhash`c18c61f5f0…`
No malicious matches

Permhash (Mandiant)`1ca6029615…`
Too common to be evidence