Chrome Web StoreNo malware found
In code review (v0.4.7)
Our reviewer read version 0.4.7 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
82 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Moesif Origin/CORS Changer & API Logger, used by 100,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can read and change data on all websites.
Key findings
- High
Other
Bundled manifest is version 2, but the live Chrome Web Store listing reports manifest version 3 with different permissions (activeTab, declarativeNetRequest, storage, host_permissions). This indicates the extension may have been updated in the store without matching the submitted bundle, or the bundle is outdated. A version mismatch can hide malicious code changes or indicate a delayed-malicious update.
Analyst notes
The extension is a legitimate developer tool for CORS and API debugging by a trusted publisher (Moesif). The broad permissions are required for its core functionality, and the CSP restricts connections to publisher domains. No malicious code is evident in the provided files; however, the JavaScript bundles are not included, so full review is limited. The manifest version mismatch with the live listing is noted but not indicative of malice.
Moesif Origin/CORS Changer & API Logger Chrome extension security report
ID: digfbfaphojjndkpccljibejjbppifbc
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Moesif
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
82 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Allow cross-domain requests by override Origin and CORS headers. Log/capture XmlHttpRequest API calls for debugging and analytics.
Read the publisher’s full description
This plugin allows you to send cross-domain requests directly from browser without receiving Cross Origin Errors. You can override the Request Origin header with this plugin and also have Access-Control-Allow-Origin set to *. Update: We removed email list signup and added ability to log and capture API calls. Migrated from Chrome Manifest V2 to V3, due to the new V3 "storage" api, your old settings may need to be reentered. You can override: Request Headers: Origin Response Headers: Access-Control-Allow-Origin, Access-Control-Allow-Methods, Access-Control-Allow-Headers, Access-Control-Allow-Credentials, Access-Control-Expose-Headers Guide on CORS: https://www.moesif.com/blog/technical/cors/Authoritative-Guide-to-CORS-Cross-Origin-Resource-Sharing-for-REST-APIs/ API Logging & Capture: You can capture any Ajax, XmlHttpRequest, or fetch API requests made by any page, and send to your Moesif account for analytics and debugging. DISCLAIMER: This tool circumvents CORS security rules baked into every browser and is intended for testing your own website during development. Some production websites like Google Docs or Facebook may complain if they detect something that isn't expected. You can use the whitelist feature to only turn on for some domains. To avoid security issues, it is recommend to turn off after debugging. About Moesif API Monetization and Observability: Moesif (https://www.moesif.com) enables API teams at UPS, You.com, Deloitte, and others to deeply understand customer API usage and ship better API products with user-centric API analytics and monetization, which enables you to: - Understand customer API usage with user behavior analytics. - Debug issues quickly with high-cardinality API logs and metrics. - Get alerted of problems that impact customers. - Track API KPIs with custom dashboards. - Meter API usage and set up billing meters with integrations with Stripe, Chargebee, and custom billing platforms. By using this extension, you agree to Moesif's terms of use (https://www.moesif.com/terms) and privacy policy (https://www.moesif.com/pravicy).
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
82 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
More from Moesif
- ApiRequest.io Ajax Capture Debugging Tool1,000 users
Popular in Developer Tools
- GoFullPage - Full Page Screen Capture11,000,000 users
- touchenex 확장8,000,000 users
- TrendAI™ Toolbar for Enterprise7,000,000 users
- SentinelOne6,000,000 users
- React Developer Tools5,000,000 users