Extension Auditor
Sign Up
Chrome Web Store
1Versions
1Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.

8 indicators in this extension

8 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

ModHeader V1, used by 2,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites. It was last updated in July 2026.

Analyst notes

The source code is a clean, readable implementation of an HTTP header modification developer tool (similar to the well-known ModHeader extension). uses declarativeNetRequest exclusively to apply user-configured rules locally, all profile data is stored in (Google's own infrastructure — no external exfiltration), and is a straightforward AngularJS popup controller with zero outbound network calls to any third-party server. The ML score is driven by broad permissions that are functionally required for this category of tool, and the permhash cluster has zero malware peers. The third-party risk score's 'likelihood' flags (new extension, low users, recent update) are contextual signals, not behavioral evidence of malice.

ModHeader V1

ModHeader V1 Chrome extension security report

ID: aaoldbmeacpmfbmdhjchapoadbbbipfl

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
2.3.2.1
Size
0.17 MB
Rating
4.0/5
Reviews
0
Users
2,000
Type
Extension
Updated
Jul 16, 2026
Category
Developer tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Author
Yogesh Hooda
Privacy
Privacy Policy
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
2,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
declarativeNetRequestWithHostAccess
Permission
Critical
This permission combines network request modification with host permissions. Rated Critical because it can modify requests for specific domains, potentially targeting sensitive websites with precise attack rules.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

8 indicators in this extension

8 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Modify request and response headers

Read the publisher’s full description

Modify HTTP request and response headers. Override Origin, cookies, and CORS for local API testing. FEATURES • Modify request and response headers • Override Origin (e.g. spoof a production origin from localhost) • Multiple profiles — switch, pause, or enable rules quickly • URL filters so rules only apply to selected APIs/hosts • Cookie and redirect overrides • Import / export profiles • Lock modifications to the current tab • Works in Incognito (spanning) COMMON USE CASES • Call APIs from localhost when the server rejects origin_not_allowed • Fix or simulate CORS by setting Access-Control-Allow-Origin • Inject Authorization tokens for API testing • Change User-Agent, Referer, Content-Type, and custom headers • Reproduce production header behavior in a local environment PERMISSIONS This extension needs access to network requests and storage so it can apply your header rules and save your profiles locally. Built for developers who need fast, repeatable header control without changing application code.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
URLs
8

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

8 indicators in this extension

8 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
2.3.2.1
Latest
0.17 MBNo malware found0
51c43d1f5f2288c1d6b129dba711f499f6ed1c1934c05a55efda861acd5dd3c6
Showing 1 to 1 of 10 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In

Related extensions

Popular in Developer Tools

Store rankings

Where this extension appears in store category, collection and keyword rankings.