Chrome Web Store
169Versions
1Code reviewed

No malware found

In code review (v6.32.0)

Our reviewer read version 6.32.0 โ€” the most recent version we have reviewed โ€” and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

MEGA, used by 1,000,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in October 2026.

The extension is the official MEGA cloud storage client. It uses 'declarativeNetRequest' solely to redirect URLs to local extension pages for improved performance and security, and 'unlimitedStorage' is required for client-side encrypted data caching. No third-party communication or suspicious behavior detected. The risk-engine findings are false positives due to over-reliance on permission characteristics without context.

MEGA

MEGA Chrome extension security report

ID: bigefpfhnfcobdlfbedofhhaibnlghod

Supported Languages

๐Ÿ‡ธ๐Ÿ‡ฆArabic
๐Ÿ‡ง๐Ÿ‡ทBrazilian Portuguese
๐Ÿ‡จ๐Ÿ‡ณChinese (Simplified)
๐Ÿ‡น๐Ÿ‡ผChinese (Traditional)
๐Ÿ‡ณ๐Ÿ‡ฑDutch
๐Ÿ‡บ๐Ÿ‡ธEnglish
๐Ÿ‡ซ๐Ÿ‡ทFrench
๐Ÿ‡ฉ๐Ÿ‡ชGerman
๐Ÿ‡ฎ๐Ÿ‡ฉIndonesian
๐Ÿ‡ฎ๐Ÿ‡นItalian
๐Ÿ‡ฏ๐Ÿ‡ตJapanese
๐Ÿ‡ฐ๐Ÿ‡ทKorean
๐Ÿ‡ต๐Ÿ‡ฑPolish
๐Ÿ‡ท๐Ÿ‡ดRomanian
๐Ÿ‡ท๐Ÿ‡บRussian
๐Ÿ‡ช๐Ÿ‡ธSpanish
๐Ÿ‡น๐Ÿ‡ญThai
๐Ÿ‡น๐Ÿ‡ทTurkish
๐Ÿ‡ป๐Ÿ‡ณVietnamese

Extension Info & Metadata

Status
Active
Version
7.6.3
Size
10.63 MB
Rating
4.3/5
Reviews
7,116
Users
1,000,000
Type
Extension
Updated
Oct 9, 2026
Category
Productivity Workflow
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor โ€” Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
https://mega.nz/
Country
NZ
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Address
Level 21, Huawei Centre 120 Albert St Auckland 1010 NZ
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
1,000,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk: โ€ข 25% increase: Unsafe code evaluation capabilities increase attack surface
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
https://mega.nz/*
Host
Medium
Host permission โ€” access limited to this URL pattern.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Secure cloud storage, chat, and meetings

Read the publisherโ€™s full description

MEGA is a secure, user-controlled end-to-end encrypted cloud storage and communications service with generous free storage space. Unlike other cloud storage providers, your data is encrypted and decrypted by your client devices only and never by us. This extension allows you to install MEGA into your browser to reduce loading times, improve download performance and strengthen security. Any MEGA URL will be captured by this extension and stay local (no JavaScript will be loaded from our servers). MEGAโ€™s source code files (HTML, CSS and JavaScript) are loaded from the extension itself and do not require additional integrity verification. This saves time by not downloading these files from MEGAโ€™s servers and verifying them each time you visit the MEGA website. The executable client code runs directly from the userโ€™s local machine, rather than being loaded from MEGA over TLS/SSL. Browser extension updates are cryptographically protected. For more information see section 2.2 of our whitepaper https://mega.io/SecurityWhitepaper.pdf. Security reviewers can find our source code at https://mega.io/sourcecode.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
222
IPv4
38
IPv6
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version
Size
Verdict
Findings
Permhash
7.6.3
Latest
10.63 MBNot scannedโ€”
ce9be33a19e45babf9b3155ee13985750ae305fc3489de007b91c89a1dd6b39d
7.6.2
10.62 MBNot scannedโ€”
ce9be33a19e45babf9b3155ee13985750ae305fc3489de007b91c89a1dd6b39d
7.5.0
10.61 MBNot scannedโ€”
ce9be33a19e45babf9b3155ee13985750ae305fc3489de007b91c89a1dd6b39d
7.4.1
10.60 MBNot scannedโ€”
ce9be33a19e45babf9b3155ee13985750ae305fc3489de007b91c89a1dd6b39d
7.3.0
10.54 MBNot scannedโ€”
ce9be33a19e45babf9b3155ee13985750ae305fc3489de007b91c89a1dd6b39d
7.2.2
10.53 MBNot scannedโ€”
ce9be33a19e45babf9b3155ee13985750ae305fc3489de007b91c89a1dd6b39d
7.1.2
10.52 MBNot scannedโ€”
ce9be33a19e45babf9b3155ee13985750ae305fc3489de007b91c89a1dd6b39d
7.1.1
10.52 MBNot scannedโ€”
ce9be33a19e45babf9b3155ee13985750ae305fc3489de007b91c89a1dd6b39d
7.0.6
10.47 MBNot scannedโ€”
ce9be33a19e45babf9b3155ee13985750ae305fc3489de007b91c89a1dd6b39d
7.0.7
10.47 MBNot scannedโ€”
ce9be33a19e45babf9b3155ee13985750ae305fc3489de007b91c89a1dd6b39d
Showing 1 to 10 of 170 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in productivity/workflow