Chrome Web Store
1Versions
1Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.

What our analysis found

ModHeader v2, used by 30,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites. It was last updated in July 2026.

Analyst notes

All source code is entirely on-device with zero network to any external server. is a pure declarativeNetRequest rule compiler that reads from chrome.storage.local and writes DNR rules; manages user-defined header rules stored locally. Every permission is fully accounted for: declarativeNetRequest+<all_urls> for applying header mods, clipboardRead for the user-triggered 'Paste rules from clipboard' feature (:974-999), clipboardWrite for profile export to clipboard (:1104-1111), storage for persisting rules. The ML score is driven by the permission combination and small user count, not by malicious behavior — the permhash cluster has 0% malware rate and the third-party risk score's likelihood signals are all flags, not behavioral ones.

ModHeader v2

ModHeader v2 Chrome extension security report

ID: lgicpjobihoieiojeighojeapefgogdp

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
1.0.0
Size
0.05 MB
Rating
3.0/5
Reviews
3
Users
30,000
Type
Extension
Updated
Jul 16, 2026
Category
Developer tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Author
ModHeaderV2
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
30,000

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
clipboardWrite
Permission
High
This permission allows modification of clipboard content. Rated High because it can inject malicious content into the clipboard, modify copied passwords, and manipulate copied data.
clipboardRead
Permission
High
This permission allows reading clipboard content. Rated High because it can steal copied passwords, sensitive data, and monitor all content copied to clipboard.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

About this extension

Modify HTTP request and response headers, cookies, redirects and CSP. All data stays on your device.

Read the publisher’s full description

A local, secure version of ModHeader. Modify HTTP request and response headers, cookies, URL redirects and Content-Security-Policy per profile. All rules are stored locally on your device — nothing is ever uploaded, and it works fully offline.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
1.0.0
Latest
0.05 MBNo malware found0
2000b945a972b6b10205aca3d500040b3ca0e3c6bf335703ce82dc00a04cf82a
Showing 1 to 1 of 10 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Developer Tools