Extension Auditor
Sign Up
Chrome Web Store
15Versions
1Code reviewed

Caution required

Suspicious in code review (v2.0.13)

Our reviewer found behaviour consistent with malware in version 2.0.13, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

What our analysis found

OrangeMonkey Pro, used by 300,000 people, is rated caution by Extension Auditor. Our code review reported 2 findings (2 medium), led by tracking. Its permissions mean it can read and change data on all websites, can inject scripts into pages and can observe network requests.

Key findings

  • medium· tracking —Sends screenview event with installed script names (cd1) to Google Analytics (UA-142528268-15) without disclosed data collection. The extension's CWS privacy section declares 'none declared', but this collects usage data and script list.
  • medium· tracking —Implements Google Analytics 4 tracking (G-E2R0CQE2QJ) for events like 'show_devmode_popup', 'close_devmode_popup', and 'extension_installed'. This telemetry is not disclosed in the CWS data-collection statement.

The extension is a userscript manager with broad permissions necessary for its functionality. However, it contains undisclosed analytics to Google Analytics (UA-142528268-15 and G-E2R0CQE2QJ), collecting installation data and script names without user consent. This contradicts the CWS disclosure of 'none declared'. All other code behavior is consistent with its stated purpose. The ML model likely overfit on the broad permission set.

OrangeMonkey Pro

OrangeMonkey Pro Chrome extension security report

ID: ggdmdoodcfamjggeigifpjfnnjfbland

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
2.0.15
Size
0.71 MB
Rating
3.2/5
Reviews
502
Users
300,000
Type
Extension
Updated
Aug 8, 2026
Category
Make_chrome_yours Accessibility
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue
This publisherTrack record
2extensions
All still listed

Publisher Contextual Analysis

Trusted
Author
exten.helper
Privacy
Privacy Policy
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Extensions
2
Active
2
Obsolete
0
Listed
2
Unlisted
0
Users
2,300,000

Screenshots & videos

Screenshot 1
Screenshot 2

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
userScripts
Permission
Critical
This permission allows registration of arbitrary user scripts that run in a page's main world. Rated Critical because the scripts execute with full access to page JavaScript, can be updated at runtime from remote code, and bypass the isolated world that normally contains content scripts.
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
*://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In

About this extension

Lightweight Userscript manager. Provides userscripts support for Chromium browsers

Read the publisher’s full description

OrangeMonkey is a lightweight userscript manager. Fork of the popular Violentmonkey extension with enhanced functionality and updated design. OrangeMonkey is used to run called userscripts. Using them, you can, for example, make a dark theme for your favorite site. Features: - Ability to make backups by saving your entire gallery in a zip archive - Installing userjs by link - Large userjs gallery available and search through it - Convenient one-click script switching - All GM_ * functions available Changelog: - v1.0.2 - Updated popup

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
URLs
19

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
Version
Size
Verdict
Findings
Permhash
2.0.15
Latest
0.71 MBNot scanned—
319797cd462d3c4bfec9dc650849bb8c870a58b3af6b3bac5e2d68ce191c4202
2.0.14
0.71 MBNot scanned—
319797cd462d3c4bfec9dc650849bb8c870a58b3af6b3bac5e2d68ce191c4202
2.0.13
0.71 MBCaution0
319797cd462d3c4bfec9dc650849bb8c870a58b3af6b3bac5e2d68ce191c4202
2.0.12
0.71 MBNot scanned—
319797cd462d3c4bfec9dc650849bb8c870a58b3af6b3bac5e2d68ce191c4202
2.0.11
0.71 MBNot scanned—
c22d164649e7f46fe63d218064f085c29ee2926b2cb459236f8245deae3a6ac2
2.0.10.1
0.71 MBNot scanned—
c22d164649e7f46fe63d218064f085c29ee2926b2cb459236f8245deae3a6ac2
2.0.10
0.71 MBNot scanned—
c22d164649e7f46fe63d218064f085c29ee2926b2cb459236f8245deae3a6ac2
2.0.9
0.73 MBNot scanned—
c22d164649e7f46fe63d218064f085c29ee2926b2cb459236f8245deae3a6ac2
2.0.8
0.71 MBNot scanned—
c22d164649e7f46fe63d218064f085c29ee2926b2cb459236f8245deae3a6ac2
2.0.4
0.70 MBNot scanned—
c22d164649e7f46fe63d218064f085c29ee2926b2cb459236f8245deae3a6ac2
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In

Related extensions

More from exten.helper

Popular in make_chrome_yours/accessibility