No malware found
In code review (v1.0.1)
Our reviewer read version 1.0.1 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
28 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Konode | Private Bookmark & Tab Sync, used by 1,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in November 2026.
Analyst notes
The source code fully corroborates the extension's stated purpose as a privacy-first browser sync tool. Every network call in targets exactly the declared host_permissions ([domain withheld] for Google Drive OAuth+API, [domain withheld] for GitHub backend, user-configured WebDAV URLs under optional_host_permissions). There is zero telemetry, no analytics SDK, and no Konode-owned server endpoints anywhere in the code. The ML signal was driven by minified `!0`/`!1` patterns (1899 exclamation hits = Terser output), base64 encoding utilities used for PKCE auth and GitHub content uploads, and the `identity` permission required for Google Drive OAuth — all fully explained by the extension's legitimate sync functionality. The permhash cluster (7 versions, 0 malware flags) and publisher reputation corroborate the false-positive assessment; the low user count and recency that drove the third-party risk score are expected for a new privacy tool.
Konode | Private Bookmark & Tab Sync Chrome extension security report
ID: mmlfiiimnpnjcjhhbldenpcmnibedkfa
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Kо̄nabe Studio
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
Sensitive Domain Access
This extension has access to the following sensitive domains:
- https://www.googleapis.com/*
- https://oauth2.googleapis.com/*
- https://accounts.google.com/*
- https://api.github.com/*
28 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Privacy-first browser sync to your own storage: Google Drive, WebDAV, GitHub.
Read the publisher’s full description
Konode syncs your browser data to storage you own. There is no Konode server and no account to create — your bookmarks go straight from your browser to your Google Drive, a GitHub repository, or any WebDAV server (Nextcloud, Synology, pCloud, and more). What it syncs - Bookmarks — full folder structure, adds, deletes, moves, and reorders - Open tabs — save your session and restore another device's tabs - History — a synced, de-duplicated list - Extensions — see which extensions are missing on this device Bookmarks sync on their own; history, tabs, and the extension list are optional and each one asks for its permission only when you turn it on. Private by design - No Konode servers. Your data travels only between your browser and the storage backend you configure. - No telemetry, no analytics, no tracking of any kind. - Optional end-to-end encryption (AES-256-GCM). You choose during setup — nothing is uploaded until you've decided. With encryption on, your storage provider can't read your data. - Credentials stay on your device, in the browser's extension storage. - Open source (MPL-2.0): https://github.com/konabe-studio/konode Works on your browser Chrome, Brave, Helium, ungoogled-chromium — Google Drive sign-in works on all of them, not just Chrome. A Firefox version is available too. How it works Each device writes its own sync file to a Konode folder on your backend and merges every other device's file — additively and deletion-aware, so 3+ devices converge without a central server. Conflicts can be resolved newest-wins, prefer-local, prefer-remote, or manually from the popup.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
28 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in Tools
- Montara Chrome Extension639,000,000 users
- 迅雷下载支持85,000,000 users
- ApexGuard VPN Proxy for Chrome10,000,000 users
- Zotero Connector9,000,000 users
- Browsec VPN - Free VPN for Chrome8,000,000 users
Store rankings
Where this extension appears in store category, collection and keyword rankings.