Chrome Web Store
142Versions
1Code reviewed

No malware found

In code review (v2026.7.1)

Our reviewer read version 2026.7.1 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Lean Library, used by 200,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites. It comes from a trusted publisher and was last updated in October 2026.

Analyst notes

The extension is a well-established library resource access tool with 200k users, a trusted publisher badge, and a featured listing. The provided UI code ( and) shows legitimate React components for settings and popups. Broad host permissions are necessary for its core function of detecting paywalls and injecting access links across all sites. No data exfiltration or malicious behavior was observed in the reviewed files. The ML risk score is 0.00, and the permhash cluster contains 0% malware. The third-party risk score indicates low likelihood of maliciousness. External resources such as the [domain withheld] font CDN are part of a legitimate academic integration, and analytics events are likely covered by the publisher's privacy policy.

Lean Library

Lean Library Chrome extension security report

ID: hghakoefmnkhamdhenpbogkeopjlkpoa

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
2026.12.1
Size
11.75 MB
Rating
3.4/5
Reviews
132
Users
200,000
Type
Extension
Updated
Oct 7, 2026
Category
Productivity Workflow
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
https://leanlibrary.com
Country
GB
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Address
1 Oliver's Yard City Road London EC1Y 1SP GB
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
200,000

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
http://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
webNavigation
Permission
High
This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

About this extension

A library-approved tool to unlock access to academic papers.

Read the publisher’s full description

Providing an uninterrupted research rhythm Lean Library is a free end-to-end research tool that brings your library’s services and resources directly into your research workflow, no matter where you start your research. Whether you are discovering and accessing academic content or saving references, Lean Library puts your library right at the heart of every research journey. Instantly and legally unlock millions of academic articles, eBooks, and open access content, avoid paywalls, and receive customised guidance from your library. Save references, highlight and annotate content, get journal alerts, and build information literacy skills with article retraction alerts and trust ratings—all from within your browser. Ready to start using Lean Library? Install the extension, select your institution and begin researching! Even if you aren’t affiliated with an institution, you can still get quick and seamless redirection to open access materials absolutely free by downloading the extension and selecting Lean Library Open as your library. Please note, the Lean Library browser extension works together with Lean Library Workspace. Create an account at workspace.leanlibrary.com. Coming from Sciwheel? Welcome! Lean Library now includes all your favourite Sciwheel features, plus much more. Install today to get started.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
2026.12.1
Latest
11.75 MBNot scanned—
8a8517f53cfbb73f313b0281fbe07eebe0e0872c6ec04113107af4a258afd066
2026.11.0
11.87 MBNot scanned—
8a8517f53cfbb73f313b0281fbe07eebe0e0872c6ec04113107af4a258afd066
2026.10.0
11.87 MBNot scanned—
8a8517f53cfbb73f313b0281fbe07eebe0e0872c6ec04113107af4a258afd066
2026.9.5
11.87 MBNot scanned—
8a8517f53cfbb73f313b0281fbe07eebe0e0872c6ec04113107af4a258afd066
2026.9.4
11.87 MBNot scanned—
8a8517f53cfbb73f313b0281fbe07eebe0e0872c6ec04113107af4a258afd066
2026.9.2
11.87 MBNot scanned—
8a8517f53cfbb73f313b0281fbe07eebe0e0872c6ec04113107af4a258afd066
2026.2.0
12.44 MBNot scanned—
8a8517f53cfbb73f313b0281fbe07eebe0e0872c6ec04113107af4a258afd066
2026.9.0
11.87 MBNot scanned—
72ff1abe5ca02807cc7d15cb4a9fc4b6bc49335f616cec857e628eb159288725
2026.8.3
11.84 MBNot scanned—
8a8517f53cfbb73f313b0281fbe07eebe0e0872c6ec04113107af4a258afd066
2026.8.2
11.84 MBNot scanned—
8a8517f53cfbb73f313b0281fbe07eebe0e0872c6ec04113107af4a258afd066
Showing 1 to 10 of 150 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in productivity/workflow