Chrome Web Store

15Versions

0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

18 indicators in this extension

18 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

What our analysis found

Karafilt is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in September 2026.

Karafilt Chrome extension security report

ID: eiclobknpdiipnhdpfpegfnkplmfnmoo

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

1.4.0

Size

0.15 MB

Rating

5.0/5

Reviews

Users

204

Type

Extension

Updated

Sep 2, 2026

Publisher Contextual Analysis

Trusted

Author: karafilt.com
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

204

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Install growth

User Growth

Showing data from Jun 14, 2026 to Oct 10, 2026

Versions

+1178.95%(+224 users)

Compared to 3 months ago

15 versions released in this period

See plans

React Flow

Internal permhash`a9a466114e…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Permhash (Mandiant)`1a18a2e25f…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Network indicators

16 URLs and 2 IP literals were extracted from this version.

Item	Type	Severity	Description
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>	Host	Critical	Broad host access — the extension can read/modify content on every website.
tabCapture	Permission	High	This permission captures content and audio from browser tabs. Rated High because it can record sensitive web content, capture form input, and monitor user interactions.
offscreen	Permission	High	This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 25% increase: Unsafe code evaluation capabilities increase attack surface
Broad Host Permissions	Risk Factor	High	This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access	Risk Factor	High	This extension can inject scripts into any website.
Unsafe WebAssembly Execution	Risk Factor	High	This extension's CSP allows "wasm-unsafe-eval".
activeTab	Permission	Medium	This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution	Risk Factor	Medium	This extension runs content scripts at document_start.
sidePanel	Permission	Low	This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.
contextMenus	Permission	Low	This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
alarms	Permission	Low	This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

18 indicators in this extension

18 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

About this extension

Real-time vocal removal for karaoke — removes vocals from any tab audio

Read the publisher’s full description

Turn any tab into a karaoke machine. Karafilt removes vocals from the audio of the tab you're watching — YouTube, streaming sites, anywhere music plays — and shows time-synced lyrics in the side panel so you can sing along. HOW IT WORKS Click the Karafilt icon on a tab playing music — the side panel opens with the song's lyrics, pinned to that tab so the rest of your browsing is untouched. Press Start Filtering (or Ctrl+Shift+K) and the vocals drop out. FEATURES • Real-time vocal removal — no uploads, no waiting • Two free filter modes that run entirely in your browser (WebAssembly): Spectral (frequency-selective, keeps bass and stereo) and Basic (fast center-channel cancellation) • Synced lyrics with karaoke highlighting, from LRCLib (with Lyrics.ovh and Genius fallbacks) — including a focus mode that shows the current lines big • Pick the right match when a song has multiple versions • Vocal/instrumental mix slider — keep a hint of the original vocal as a guide • Works on any site that plays audio KARAFILT PRO (OPTIONAL) The free modes are yours forever. Pro adds studio-grade AI separation (Demucs) running on our GPU servers for noticeably cleaner vocal removal — with a free trial. The extension is also self-hosting friendly: point it at your own server if you run the open-source backend. PRIVACY Free filtering happens 100% locally — your audio never leaves the browser. Song titles are sent to lyrics databases to find lyrics. Audio is only sent to a server in AI mode, to the server you choose, and is processed in memory — never stored. Karafilt is open source: https://github.com/lemara98/karafilt Privacy policy: https://karafilt.com/privacy

User reviews

5.0 out of 5 · 5 most recent reviews

Text reviews

Positive

Negative

Best plugin for Karaoke, highly recommend it!

Vidoje Markovic·28 Aug 2026

I was skeptical that real-time vocal removal in a browser would sound decent, but Spectral Deep gives a surprisingly clean karaoke mix. The word-by-word lyrics are the part I didn't expect to love — they light up as you sing, so you never lose your place. Party Mode with the QR code is a genuinely fun idea; friends just scan and add songs from their phones, no app needed. Lightweight and free. Highly recommend.

Luka Todorovic·28 Aug 2026

I've been using this extension for a while now, and it's honestly been a lot of fun. The vocal removal works surprisingly well in real time, so I can sing along to pretty much anything playing in my browser. It's simple to use, runs smoothly, and does exactly what it's supposed to. Definitely worth checking out if you're into karaoke or just want instrumental versions of your favorite songs.

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

18 indicators in this extension

18 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

Version	Size	Verdict	Findings	Permhash
1.4.0 Latest	0.15 MB	Not scanned	—	1a18a2e25fd3a032c67fec348253da9154982ff3a892efa9350f4f0aaddce2d3
1.1.1	0.12 MB	Not scanned	—	1a18a2e25fd3a032c67fec348253da9154982ff3a892efa9350f4f0aaddce2d3
1.3.1	0.13 MB	Not scanned	—	1a18a2e25fd3a032c67fec348253da9154982ff3a892efa9350f4f0aaddce2d3
1.3.0	0.13 MB	Not scanned	—	1a18a2e25fd3a032c67fec348253da9154982ff3a892efa9350f4f0aaddce2d3
1.2.2	0.13 MB	Not scanned	—	1a18a2e25fd3a032c67fec348253da9154982ff3a892efa9350f4f0aaddce2d3
1.2.1	0.13 MB	Not scanned	—	1a18a2e25fd3a032c67fec348253da9154982ff3a892efa9350f4f0aaddce2d3
1.2.0	0.12 MB	Not scanned	—	1a18a2e25fd3a032c67fec348253da9154982ff3a892efa9350f4f0aaddce2d3
1.1.2	0.12 MB	Not scanned	—	1a18a2e25fd3a032c67fec348253da9154982ff3a892efa9350f4f0aaddce2d3
1.1.0	0.13 MB	Not scanned	—	1a18a2e25fd3a032c67fec348253da9154982ff3a892efa9350f4f0aaddce2d3
1.0.0	0.11 MB	Not scanned	—	1a18a2e25fd3a032c67fec348253da9154982ff3a892efa9350f4f0aaddce2d3

Showing 1 to 10 of 20 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Not reviewed

18 indicators in this extension

What our analysis found