Chrome Web Store
11Versions
1Code reviewed

No malware found

In code review (v5.3.1)

Our reviewer read version 5.3.1 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

8 indicators in this extension

8 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

NoFollow, used by 100,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can inject scripts into pages.

Key findings

  • High

    Other

    The bundled manifest declares version 2, but the live CWS listing summary shows version 3 (with 'scripting' permission and host_permissions). This mismatch could indicate a stale review bundle or a discrepancy in the published extension. It does not in itself imply malice, but it reduces transparency.

Analyst notes

The extension's functionality matches its description—outlining nofollow links and detecting meta tags via content script injection. Error logging is sent to the publisher's own domain ([domain withheld]), consistent with the explicit CSP and typical telemetry. The bundled manifest is Manifest V2, while the published CWS summary shows V3 for the same version; this mismatch is likely a review-time artifact but does not indicate malicious intent. All code is transparent, with no obfuscation, data exfiltration, or remote code loading beyond developer debugging.

NoFollow

NoFollow Chrome extension security report

ID: dfogidghaigoomjdeacndafapdijmiid

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
6.2.0
Size
0.06 MB
Rating
4.3/5
Reviews
235
Users
100,000
Type
Extension
Updated
Sep 1, 2026
Category
Developer tools
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
5extensions
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
igorware.com
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Extensions
5
Active
5
Obsolete
0
Listed
4
Unlisted
1
Users
106,207

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
http://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

8 indicators in this extension

8 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Outline nofollow links, detect nofollow and noindex meta tags on webpages. Features website filtering and custom CSS outline styles.

Read the publisher’s full description

:: Features ★ supports NOFOLLOW, UGC, and SPONSORED attribute values ★ supports search engine specific robot meta tags ★ disable or enable extension for defined websites :: Minimum Requirements Chrome v116 :: Contact & Report issues: https://www.igorware.com/contact ------------------------------------------------------ :: Changelog v6.0.1 - fixed several async issues v6.0.0 - switched to extension manifest V3 - added export and import - added keyboard shortcuts - removed "Remember minimised state" setting - now it always remembers minimised state across browser restarts - misc code improvements v5.3.4 - fixed an error on options save v5.3.3 - fixed visual issues in extension options for high pixel density screens v5.3.2 - trying a fix for errors on Mac OS v5.3.1 - fix: improved error logging v5.3.0 - ignore certain errors in logger - added CSP for better security v5.2.2 - fixed issue where extension would not mark links with image nested more than one level deep v5.2.0 - support for UGC and SPONSORED attribute values (there is no way to visually distinguish it from NOFOLLOW value at this time) - replaced facebook and twitter share links on options page v5.1.0 - improved the way injected script communicates with background script - fix: improved error logging v5.0.0 - new: added outline for links without nofollow attribute ("DoFollow" links) - new: added outline for external links - new: added "D" button next to each style input so you can easily restore default style value - new: inject content scripts to already opened browser tabs on extension start, this should improve user experience on extension install and update - change: updated minimum requirements to Chrome v39 - change: updated default outline styles (this will be noticed only by new users) - change: merged content scripts into one script, should use less resources now - change: made sure that extension doesn't try to load itself into pages from web store to avoid "no permission" errors - change: improved error logging - change: removed Google+ icon and updated Facebook and Twitter icons ===> Full changelog on the website

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
8

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

8 indicators in this extension

8 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
6.2.0
Latest
0.06 MBNot scanned—
71cc340046b24f0d3299fb4b05ecaa3e1b106e47242ca9aca9e0e78d916c8ebd
6.1.1
0.06 MBNot scanned—
bc95223be2ef86fedb2e5dea4c144f344e7a214f9666ff98350bc979d6c9c62f
6.1.0
0.06 MBNot scanned—
dd87a7f565936efa6b3e6f01f42b972fecab4a06bc2dfb1a0dff40c6b4f5e80b
6.0.2
0.06 MBNot scanned—
dd87a7f565936efa6b3e6f01f42b972fecab4a06bc2dfb1a0dff40c6b4f5e80b
6.0.0
0.06 MBNot scanned—
dd87a7f565936efa6b3e6f01f42b972fecab4a06bc2dfb1a0dff40c6b4f5e80b
5.3.4
0.06 MBNot scanned—
bc95223be2ef86fedb2e5dea4c144f344e7a214f9666ff98350bc979d6c9c62f
5.3.3
0.06 MBNot scanned—
bc95223be2ef86fedb2e5dea4c144f344e7a214f9666ff98350bc979d6c9c62f
5.3.2
0.06 MBNot scanned—
bc95223be2ef86fedb2e5dea4c144f344e7a214f9666ff98350bc979d6c9c62f
5.3.1
0.06 MBNo malware found0
bc95223be2ef86fedb2e5dea4c144f344e7a214f9666ff98350bc979d6c9c62f
5.3.0
0.06 MBNot scanned—
bc95223be2ef86fedb2e5dea4c144f344e7a214f9666ff98350bc979d6c9c62f
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

More from igorware.com

Popular in Developer Tools