Chrome Web Store
2Versions
1Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.

14 indicators in this extension

14 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

PDF Candy | online PDF tools, used by 100,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in October 2025.

Analyst notes

Extension implements advertised PDF tools, sending files and page captures to its own backend ([domain withheld]). No covert data exfiltration, tracking, or unauthorized collection found. Permissions are necessary for functionality: scripting for HTML capture, downloads for saving results, contextMenus for quick access, <all_urls> for content-based tools. The ML model's low score is correct; the internal risk engine overrates broad permissions without code misuse.

PDF Candy | online PDF tools

PDF Candy | online PDF tools Chrome extension security report

ID: omlipfboclalclnoekphiecadjlklphh

Supported Languages

🇸🇦Arabic
🇧🇷Brazilian Portuguese
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇳🇱Dutch
🇺🇸English
🇫🇷French
🇩🇪German
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇵🇱Polish
🇷🇺Russian
🇪🇸Spanish
🇸🇪Swedish
🇹🇭Thai
🇹🇷Turkish
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
1.1.1
Size
0.61 MB
Rating
4.0/5
Reviews
19
Users
100,000
Type
Extension
Updated
Oct 18, 2025
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
https://pdfcandy.com/
Country
CY
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Address
Agias Phylaxeos, 182, Kofteros Business Center, 201 Limassol 3083 CY
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
100,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

14 indicators in this extension

14 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

A fast and easy way to edit, merge, split, compress, and secure PDF files.

Read the publisher’s full description

PDF Candy is an all-in-one online solution for working with PDF files on the go. Fast and easy to use tools at your fingertips. Simplify your PDF tasks directly in your browser! Official extension from PDF Candy. 19 languages. With this extension, you can work with PDF files easily and quickly: compress, convert to JPG, and extract text or images from files without having to visit the website. Access tools right from the toolbar and context menu for faster productivity. Convert webpages and images from context menu. ★ Main features of the extension: - Compress PDF files - Convert PDF to JPG - Extract text from PDF - Extract images from PDF ★ Quick access to 90+ online tools: - Edit PDF - Merge PDF - Convert PDF to Word - Split PDF - Unlock PDF - Convert Word to PDF - Edit PDF Metadata - Crop PDF - Rearrange pages - and many others Access more than 90 PDF related tools directly from the extension, making it easier to manage and edit PDFs on the fly. ★ New context menu tools: - Convert webpage to PDF - Convert image to PDF By installing this extension, you agree to PDF Candy Privacy Policy and Terms of Use.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
4

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

14 indicators in this extension

14 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.1.1
Latest
0.61 MBNo malware found0
e9c1d8f5547696f53411933a1cb4ceb8c3cf8acd0c8b8f0ca6d8e8f57995f2ff
1.0.2
0.06 MBNot scanned—N/A
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.