Chrome Web Store

8Versions

1Code reviewed

No malware found

In code review (v5.0.5)

Our reviewer read version 5.0.5 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

49 indicators in this extension

49 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

What our analysis found

Native MPEG-Dash + HLS Playback, used by 70,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites. It comes from a trusted publisher and was last updated in May 2024.

Analyst notes

The extension's permission set and use of declarativeNetRequest are required for its core functionality of redirecting streaming media URLs to a built-in player. No external network communication, data collection, or code injection is present. The ML model's pattern matches originate from the Angular polyfill and standard bundler output, not malicious behavior. Publisher reputation, user ratings, and the extension's long history support a benign assessment.

Native MPEG-Dash + HLS Playback Chrome extension security report

ID: cjfbmleiaobegagekpmlhmaadepdeedn

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

5.0.7

Size

0.78 MB

Rating

4.3/5

Reviews

Users

70,000

Type

Extension

Updated

May 7, 2024

Publisher Contextual Analysis

Trusted

Author: https://cavar.net/
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

70,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Install growth

User Growth

Showing data from Sep 10, 2023 to Sep 08, 2024

Versions

No change in user count

Compared to 3 months ago

6 versions released in this period

Rating Count

Total: 50 ratings

Average Rating

Current: 4.38 / 5.0-0.13

See plans

React Flow

Internal permhash`4c380fbc15…`
3 malicious

27 other extensions carry this fingerprint; 3 of the cluster are known malicious.

Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
+20 more

Permhash (Mandiant)`504ec80eb9…`
No malicious matches

3 other extensions carry this fingerprint, none of them known malicious.

Withheldnot flagged
Withheldnot flagged
Withheldnot flagged

Network indicators

37 URLs and 1 IP literals were extracted from this version.

Item	Type	Severity	Description
declarativeNetRequest	Permission	Critical	This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
<all_urls>	Host	Critical	Broad host access — the extension can read/modify content on every website.
Broad Host Permissions	Risk Factor	High	This extension has broad host permissions allowing it to access many or all websites.
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
contextMenus	Permission	Low	This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

49 indicators in this extension

49 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

About this extension

Allow the browser to play HLS (m3u8) or MPEG-Dash (mpd) video urls 'natively'

Read the publisher’s full description

Extension is not for sale or third party ad integration. Allows HLS and MPEG-DASH native playback in Chrome browser. Click on any m3u8 or mpd link inside Chrome to play it directly in a new tab. By default, the browser downloads any m3u8 and mpd files that were requested. This plugin checks any links to see if they match. If that's the case, it opens a new tab on a video player that uses the hls.js and dashjs library. This extension is just a wrapper for those players on Chrome. Please read the release notes on install before use. Report any issues to https://github.com/Palethorn/nas-extension/issues

User reviews

3.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

So whats up with the bitcoin QR codes listed as an asset?

Ray Balhorn·18 Sept 2024

faltaria para poner clearkey

o·6 Jul 2024

Hello, I hope you're having a splendid day! I am currently seeking opportunities to expand my business operations by investing in extensions with a significant user base, beginning from 50,000 users and up. No matter if your extension has a modest user base or counts its users in the millions, I am interested and ready to negotiate a purchase. If you are in possession of such an extension and looking to turn it into a profit, please consider reaching out to me. We can discuss the price and proceed with a transparent and secure transaction through a trusted escrow service based in the United States. It's great that Google allows the transfer of extension ownership between accounts, so your Google account ownership will remain intact. If you have any needs, please contact us via the following contacts Whatsapp: +1 (248) 896‑8035 Telegram: t.me/harryysandersonn

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

49 indicators in this extension

49 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

Version	Size	Verdict	Findings	Permhash
5.0.5 Latest	0.78 MB	No malware found	0	504ec80eb9b7790b7b04fd7883fbff29a9796d40c3677ffa542660e609034184
5.0.4	0.78 MB	Not scanned	—	504ec80eb9b7790b7b04fd7883fbff29a9796d40c3677ffa542660e609034184
5.0.2	3.26 MB	Not scanned	—	504ec80eb9b7790b7b04fd7883fbff29a9796d40c3677ffa542660e609034184
5.0.0	0.83 MB	Not scanned	—	c45c5e7b7a1aa8abf49606bce246767c28d48247acad803cfa337b80681e9f9e
4.0.1	0.53 MB	Not scanned	—	e7c71559d82f76fb92b34817a73397f1af359f81588af06da5ea53412edf59ba
4.0.0	0.53 MB	Not scanned	—	21987c9caabce7b70d9b3bd9e10c22e6b6fde88c77812b81ea378a77472f41e9
3.3.0	1.25 MB	Not scanned	—	21987c9caabce7b70d9b3bd9e10c22e6b6fde88c77812b81ea378a77472f41e9
5.0.7	0.78 MB	Not scanned	—	504ec80eb9b7790b7b04fd7883fbff29a9796d40c3677ffa542660e609034184

Showing 1 to 8 of 10 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Developer Tools

GoFullPage - Full Page Screen Capture11,000,000 users
touchenex 확장8,000,000 users
TrendAI™ Toolbar for Enterprise7,000,000 users
SentinelOne6,000,000 users
React Developer Tools5,000,000 users

No malware found

49 indicators in this extension

What our analysis found