Chrome Web Store
18Versions
1Code reviewed

No malware found

In code review (v2.2.1)

Our reviewer read version 2.2.1 โ€” the most recent version we have reviewed โ€” and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Microsoft 365, used by 7,018,397 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can observe network requests. It comes from a trusted publisher and was last updated in December 2023.

The extension is the official Microsoft 365 Office extension. All network requests go to Microsoft-controlled domains (,,,, etc.) and are consistent with its document functionality. The powerful permissions (webRequest, clipboard, nativeMessaging, <all_urls>) are used only for legitimate features: intercepting Office document links for redirection, in Office online, and SSO integration. Telemetry sent to is first-party and disclosed in the CWS data collection list (Personally identifiable information, User activity). No covert exfiltration or malicious code was found. A minor manifest permission mismatch with the CWS listing exists, but it is an administrative discrepancy, not evidence of malicious intent.

Microsoft 365

Microsoft 365 Chrome extension security report

ID: ndjpnladcallmjemlbaebfadecfhkepb

Supported Languages

๐Ÿ‡ช๐Ÿ‡นAmharic
๐Ÿ‡ธ๐Ÿ‡ฆArabic
๐Ÿ‡ง๐Ÿ‡ทBrazilian Portuguese
๐Ÿ‡ฌ๐Ÿ‡งBritish English
๐Ÿ‡ง๐Ÿ‡ฌBulgarian
๐Ÿ‡ช๐Ÿ‡ธCatalan
๐Ÿ‡จ๐Ÿ‡ณChinese (Simplified)
๐Ÿ‡น๐Ÿ‡ผChinese (Traditional)
๐Ÿ‡ญ๐Ÿ‡ทCroatian
๐Ÿ‡จ๐Ÿ‡ฟCzech
๐Ÿ‡ฉ๐Ÿ‡ฐDanish
๐Ÿ‡ณ๐Ÿ‡ฑDutch
๐Ÿ‡บ๐Ÿ‡ธEnglish
๐Ÿ‡ช๐Ÿ‡ชEstonian
๐Ÿ‡ต๐Ÿ‡ญFilipino
๐Ÿ‡ซ๐Ÿ‡ฎFinnish
๐Ÿ‡ซ๐Ÿ‡ทFrench
๐Ÿ‡ฉ๐Ÿ‡ชGerman
๐Ÿ‡ฌ๐Ÿ‡ทGreek
๐Ÿ‡ฎ๐Ÿ‡ณGujarati
๐Ÿ‡ฎ๐Ÿ‡ฑHebrew
๐Ÿ‡ฎ๐Ÿ‡ณHindi
๐Ÿ‡ญ๐Ÿ‡บHungarian
๐Ÿ‡ฎ๐Ÿ‡ฉIndonesian
๐Ÿ‡ฎ๐Ÿ‡นItalian
๐Ÿ‡ฏ๐Ÿ‡ตJapanese
๐Ÿ‡ฎ๐Ÿ‡ณKannada
๐Ÿ‡ฐ๐Ÿ‡ทKorean
๐Ÿ‡ฒ๐Ÿ‡ฝLatin American Spanish
๐Ÿ‡ฑ๐Ÿ‡ปLatvian
๐Ÿ‡ฑ๐Ÿ‡นLithuanian
๐Ÿ‡ฒ๐Ÿ‡พMalay
๐Ÿ‡ฎ๐Ÿ‡ณMalayalam
๐Ÿ‡ฎ๐Ÿ‡ณMarathi
๐Ÿ‡ณ๐Ÿ‡ดNorwegian
๐Ÿ‡ฎ๐Ÿ‡ทPersian
๐Ÿ‡ต๐Ÿ‡ฑPolish
๐Ÿ‡ต๐Ÿ‡นPortuguese
๐Ÿ‡ท๐Ÿ‡ดRomanian
๐Ÿ‡ท๐Ÿ‡บRussian
๐Ÿ‡ท๐Ÿ‡ธSerbian
๐Ÿ‡ธ๐Ÿ‡ฐSlovak
๐Ÿ‡ธ๐Ÿ‡ฎSlovenian
๐Ÿ‡ช๐Ÿ‡ธSpanish
๐Ÿ‡ธ๐Ÿ‡ชSwedish
๐Ÿ‡ฎ๐Ÿ‡ณTamil
๐Ÿ‡ฎ๐Ÿ‡ณTelugu
๐Ÿ‡น๐Ÿ‡ญThai
๐Ÿ‡น๐Ÿ‡ทTurkish
๐Ÿ‡บ๐Ÿ‡ฆUkrainian
๐Ÿ‡ป๐Ÿ‡ณVietnamese

Extension Info & Metadata

Status
Removed
Version
3.1.5
Size
1.49 MB
Rating
4.1/5
Reviews
4,283
Users
7,018,397
Type
Extension
Updated
Dec 13, 2023
Category
Productivity Education
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
877extensions
30 no longer listed
Scanned by Extension Auditor โ€” Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
Microsoft Corporation
Country
US
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
One Microsoft Way Redmond, WA 98052 US
Website
Visit
Extensions
877
Active
831
Obsolete
30
Listed
859
Unlisted
18
Users
1,166,957,481

Screenshots & videos

Screenshot 1
Screenshot 2

Install growth

Item
Type
Severity
Description
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
webRequestBlocking
Permission
Critical
This permission allows the extension to intercept, modify, or block any web request in real-time before it reaches its destination. Rated Critical because it can modify sensitive data (like passwords, credit cards) before encryption, redirect traffic to malicious sites, or block security updates.
Dangerous Permission Combination
Risk Factor
Critical
This extension can intercept, modify, and block web requests in real-time.
nativeMessaging
Permission
High
This permission enables communication with applications installed on your computer. Rated High because it can exchange data with native programs, potentially exposing system-level information and local files.
clipboardRead
Permission
High
This permission allows reading clipboard content. Rated High because it can steal copied passwords, sensitive data, and monitor all content copied to clipboard.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:โ€ข 10% increase: Early script execution enables pre-emptive content manipulationโ€ข 15% increase: Older manifest version lacks modern security controls
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
fileBrowserHandler
Permission
Low
This permission handles selected files through the browser. Rated Low because it only processes files explicitly selected by the user through Chrome's file browser.
https://nleditor.osi.office.net/**/*
Permission
Unknown
No classification available for this permission.
https://login.windows.net/**/*
Permission
Unknown
No classification available for this permission.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

View, edit, and create documents in your browser.

Read the publisherโ€™s full description

Built for Chrome โ€“ Use Word, Excel, PowerPoint, OneNote, and Sway Online without needing Microsoft 365 installed. Create with confidence โ€“ Use familiar formatting and layout options to express your ideas in full fidelity. Work on the go โ€“ Get to your files from anywhere, thanks to integration with OneDrive and OneDrive for Business. By installing the app, you agree to these terms and conditions: PLEASE NOTE: Refer to your license terms for Microsoft 365 browser extension software (the "software") to identify the entity licensing this supplement to you and for support information. You may use a copy of this supplement with each validly licensed copy of the software. You may not use the supplement if you do not have a license for the software. The license terms for the software apply to your use of this supplement. Privacy Policy: http://aka.ms/privacy

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
884
IPv4
4
IPv6
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version
Size
Verdict
Findings
Permhash
3.1.4
Latest
1.48 MBNot scannedโ€”
1c3927cd6e3d312d4bf55433f696a2bc3f1a632a1c7d92863aa6dd933bfbcf80
3.1.3
1.48 MBNot scannedโ€”
1c3927cd6e3d312d4bf55433f696a2bc3f1a632a1c7d92863aa6dd933bfbcf80
3.1.2
1.48 MBNot scannedโ€”
1c3927cd6e3d312d4bf55433f696a2bc3f1a632a1c7d92863aa6dd933bfbcf80
3.1.1
1.48 MBNot scannedโ€”
1c3927cd6e3d312d4bf55433f696a2bc3f1a632a1c7d92863aa6dd933bfbcf80
3.1.0
1.48 MBNot scannedโ€”
1c3927cd6e3d312d4bf55433f696a2bc3f1a632a1c7d92863aa6dd933bfbcf80
3.0.1
1.24 MBNot scannedโ€”
1c3927cd6e3d312d4bf55433f696a2bc3f1a632a1c7d92863aa6dd933bfbcf80
2.2.11
1.19 MBNot scannedโ€”
1c3927cd6e3d312d4bf55433f696a2bc3f1a632a1c7d92863aa6dd933bfbcf80
2.2.10
1.19 MBNot scannedโ€”
1c3927cd6e3d312d4bf55433f696a2bc3f1a632a1c7d92863aa6dd933bfbcf80
2.2.9
1.19 MBNot scannedโ€”
a202ed257d6a37826ecf01f616bb36728bb2d215846acfb73b119eac201255cc
2.2.8
1.18 MBNot scannedโ€”
a202ed257d6a37826ecf01f616bb36728bb2d215846acfb73b119eac201255cc
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.