Extension Auditor
Sign Up
Chrome Web Store
5Versions
1Code reviewed

No malware found

In code review (v1.13)

Our reviewer read version 1.13 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Picture-in-Picture Extension (by Google), used by 4,000,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in February 2025.

The extension source code is clean, open-source (Apache 2.0), and limited to Picture-in-Picture functionality. It makes no external network requests, collects no data beyond locally stored preferences, and its broad permissions are necessary for its stated purpose. The risk-engine findings are solely based on permission analysis, not on malicious code behavior. The publisher is Google, which is trusted and disclosed data collection of 'User activity' (though the code does not actually collect any).

Picture-in-Picture Extension (by Google)

Picture-in-Picture Extension (by Google)

ID: hkgfoiooedgoejojocmhlaklaeopbecg

Extension Info & Metadata

Status
Active
Version
1.14
Size
0.01 MB
Rating
3.9/5
Reviews
2,700
Users
4,000,000
Type
Extension
Updated
Feb 13, 2025
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
Yes
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue
This publisherTrack record
25extensions
4 no longer listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
https://google.comView Profile
Privacy
Privacy Policy
Help
Help Center
Country
IE
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
Gordon House Barrow Street Dublin 4 D04 E5W5 IE
Website
Visit
Extensions
25
Active
8
Obsolete
4
Listed
5
Unlisted
20
Users
103,622,802

Screenshots & videos

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In

About this extension

Watch video using Picture-in-Picture

Read the publisher’s full description

Picture-in-Picture (PiP) allows you to watch videos in a floating window (always on top of other windows) so you can keep an eye on what you’re watching while interacting with other sites, or applications. Keyboard shortcut: Alt + P (⌥ + P on macOS) Source code: https://github.com/GoogleChromeLabs/picture-in-picture-chrome-extension By installing this item, you agree to the Google Terms of Service and Privacy Policy at https://www.google.com/intl/en/policies/.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In

No network indicators were extracted from this version.

Showing 1 to 5 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In

Related extensions

More from https://google.com

Popular in Workflow & Planning