Chrome Web StoreNo malware found
In code review
Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.
611 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Octohint, used by 3,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in September 2024.
Analyst notes
The extension is exactly what it claims: a developer tool that injects IntelliSense overlays on by running the TypeScript language service entirely in-browser. All code analysis flows through `chrome.runtime.sendMessage` (local browser-extension IPC) and the single `fetch` at line 19769 retrieves raw source from `location.href` on Bitbucket (same origin, same domain the user is already viewing). No outbound network calls to any external or third-party domains were found. The ML score is driven entirely by the bundled React 18 + TypeScript language service (~4.8 MB), which naturally produces high counts for `fromCharCode`, `innerHTML`, `appendChild`, and `js_exclamation`; the single `eval` hit is lodash's `Function('return this')()` global-detection idiom. Both our risk engine (0.00) and the third-party score (Impact, Likelihood) contradict the ML verdict.
Octohint Chrome extension security report
ID: hbkpjkfdheainjkkebeoofkpgddnnbpk
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Rongjian Zhang
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
This extension requests no permissions and has no recorded risk factors.
Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.
Data Exfiltration
Code review completed; no malicious patterns detected for this category.
Unauthorized Data Collection
Code review completed; no malicious patterns detected for this category.
Network Interception
Code review completed; no malicious patterns detected for this category.
Code Injection
Code review completed; no malicious patterns detected for this category.
Credential Theft
Code review completed; no malicious patterns detected for this category.
Obfuscation
Code review completed; no malicious patterns detected for this category.
Tracking
Code review completed; no malicious patterns detected for this category.
Privilege Escalation
Code review completed; no malicious patterns detected for this category.
Phishing
Code review completed; no malicious patterns detected for this category.
Remote Code Loading
Code review completed; no malicious patterns detected for this category.
Other
Code review completed; no malicious patterns detected for this category.
611 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
IntelliSense hint for GitHub
Read the publisher’s full description
Octohint adds IntelliSense hint to GitHub. With Octohint installed, when you view code at GitHub (For example this demo), you'll get features as follows: - Mouse Hover: Show information of current token - Left Click: Show all references of current token - [⌘] + Click: Go to definition of current token (For Windows and Linux user, use [Ctrl] instead) Octohint is a pure client thing. All code analysis are performed at your browser, which means your code and actions log like click, mousemove will never be sent to any server. Source code: https://github.com/pd4d10/octohint Report issues: https://github.com/pd4d10/octohint/issues/new
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
611 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from Rongjian Zhang
- JSON Viewer30,000 users
- Console Importer10,000 users
- HTTP Indicator10,000 users
- System Monitor10,000 users
- Memory Monitor1,000 users
Popular in Developer Tools
- GoFullPage - Full Page Screen Capture11,000,000 users
- touchenex 확장8,000,000 users
- SentinelOne7,000,000 users
- TrendAI™ Toolbar for Enterprise7,000,000 users
- React Developer Tools5,000,000 users