Chrome Web StoreNo malware found
In code review
Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.
18 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Lyrics for Spotify, used by 6,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in September 2025.
Analyst notes
The extension is a straightforward Spotify lyrics viewer: the content script injects an iframe (pointing to the extension's own bundled React page) into [domain withheld], then the iframe fetches lyrics from `[domain withheld] sending only the song title and artist — no personal data, no auth tokens. The backend URL is Portuguese for 'grab the lyrics, dude,' consistent with the Brazilian developer's GitHub handle and homepage. The manifest declares zero Chrome permissions, host_permissions are scoped only to Spotify, and the bundled manifest perfectly matches the published manifest summary. The ML score of 0.41 is driven entirely by standard minified-bundle artifacts (React + axios + color-picker libraries inflate `js_appendchild`, `js_innerhtml`, `js_fromcharcode`, and `js_exclamation` counts with no malicious intent). The third-party chrome-stats score (impact) corroborates a benign assessment; the lone negative signal is the publisher's 50% malicious sibling rate ( leave-one-out), but that reflects only one other extension and the code here is transparent and readable with no suspicious patterns.
Lyrics for Spotify Chrome extension security report
ID: ihhndlldaidolpmnejnaioncoonlfaac
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- angeloevan.ane
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
This extension requests no permissions and has no recorded risk factors.
Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.
Data Exfiltration
Code review completed; no malicious patterns detected for this category.
Unauthorized Data Collection
Code review completed; no malicious patterns detected for this category.
Network Interception
Code review completed; no malicious patterns detected for this category.
Code Injection
Code review completed; no malicious patterns detected for this category.
Credential Theft
Code review completed; no malicious patterns detected for this category.
Obfuscation
Code review completed; no malicious patterns detected for this category.
Tracking
Code review completed; no malicious patterns detected for this category.
Privilege Escalation
Code review completed; no malicious patterns detected for this category.
Phishing
Code review completed; no malicious patterns detected for this category.
Remote Code Loading
Code review completed; no malicious patterns detected for this category.
Other
Code review completed; no malicious patterns detected for this category.
18 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
This is an unofficial extension that puts back the Spotify Lyrics!
Read the publisher’s full description
It puts back the lyrics for us. Look for the mic icon and click on it, that's it :D NOTE: This extension uses free resources and can be unavailable for a while when You first open Spotify. Yeah yeah, its kinda sad, but this is a simple extension made initially for myself :P
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
18 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
More from angeloevan.ane
- Individual Fullscreen for Google Meet1,000 users
- Google Meets Individual Fullscreen29 users
Popular in Accessibility
- Read&Write for Google Chrome™19,000,000 users
- 360 Internet Protection19,000,000 users
- Dark Reader7,000,000 users
- Volume Master7,000,000 users
- Screenshot reader™7,000,000 users