Chrome Web Store
24Versions
1Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.

1158 indicators in this extension

1158 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Nodepay Extension, used by 600,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in January 2026.

Analyst notes

The extension's core logic () only communicates with first-party domains ([domain withheld], [domain withheld]) to send authentication tokens, browser IDs, and periodic pings — all expected for a 'passive income' service. The content script is restricted to [domain withheld] domains. No data exfiltration to third parties, no injection into arbitrary pages, no obfuscation beyond standard minification. The permissions 'scripting' and 'activeTab' are over-declared but not abused. The ML model likely overfitted on the large library and React bundle, which produce high counts.

Nodepay Extension

Nodepay Extension Chrome extension security report

ID: lgmpfmgeabnnlemejacfljbmonaomfmm

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
2.6.0
Size
3.04 MB
Rating
4.7/5
Reviews
6,952
Users
600,000
Type
Extension
Updated
Jan 6, 2026
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
nodepay.ai
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
600,000

Email Change History

2 changes
Jun 10, 2025
Jul 22, 2025

Screenshots & videos

Screenshot 1
Screenshot 2

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
https://*.nodepay.ai/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.nodepay.org/*
Host
Medium
Host permission — access limited to this URL pattern.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

1158 indicators in this extension

1158 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Get paid for your idle internet! Contribute to the growth of ethical AI with Nodepay and unlock a new source of passive income.

Read the publisher’s full description

Turn Your Time, Knowledge, and Data into Income with Nodepay Nodepay is a decentralized AI training and development platform. Our Chrome extension lets you earn real rewards by actively contributing to the global network—all while maintaining full control and privacy. How it works: 1. Earn Passive Income Monetize Your Idle Internet: Transform your unused bandwidth into a passive income stream. Nodepay works seamlessly in the background as you browse. 2. Active Participation Rewards Contribute to dataset sharing, AI training with Reinforcement Learning from Human Feedback (RLHF), model validation, and human verification to grow your stake in the network. 3. Privacy and Control Your Data, Your Control: Your personal information remains secure. Nodepay only uses the datasets that you choose to share. 4. Install & Earn Install the Nodepay extension, create an account, and start earning immediately through our intuitive dashboard. Why Nodepay? - Democratize AI: Join a decentralized ecosystem where everyone—not just the top 1%—can own, access, and build groundbreaking AI models. - Own Your Contributions: Retain full ownership and control over your data and efforts, reducing reliance on centralized entities. - Earn Real Income: Turn your time, knowledge, and data into tangible income and increase your stake in the network. Ready to Earn in the AI Economy? Install the Nodepay extension now and transform your contributions into monetizable assets that you own. Need Help? Check out our FAQ or contact our dedicated support team.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
134

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

1158 indicators in this extension

1158 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
2.6.0
Latest
3.04 MBNo malware found0
02bf532f6a93e3885c5de40d941194eba86e41c7883d2392540613d99137d96b
2.5.1
2.99 MBNot scanned—
02bf532f6a93e3885c5de40d941194eba86e41c7883d2392540613d99137d96b
2.2.5
2.42 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.2.4
2.42 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.2.3
2.42 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.2.2
2.42 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.2.1
2.42 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.2.0
2.42 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.1.9
2.42 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.1.7
2.42 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
Showing 1 to 10 of 30 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.