Every network call in the extension targets only Twitch ([domain withheld], [domain withheld]) or Kick ([domain withheld], [domain withheld], [domain withheld]) — the exact domains in the declared host_permissions. Cookie reads (Twitch auth-token, Kick session_token) are used exclusively as Authorization headers sent to those same platforms' own APIs; no token is ever forwarded to a third party. The scripting.executeScript usage (function Ge at:818) injects a fetch wrapper into tabs solely to bypass service-worker cookie restrictions, which is a standard MV3 architectural pattern. The ML signal is driven by minification noise (js_exclamation=3457, high from the React popup bundle) and the presence of broad permissions that are all justified by the drop-farming use case; the permhash cluster is clean ( malware-flagged versions).