Chrome Web Store
82Versions
1Code reviewed

Caution required

Suspicious in code review (v0.0.0.2)

Our reviewer found behaviour consistent with malware in version 0.0.0.2, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

28 indicators in this extension

28 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Pikabu Fixes, used by 3,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. It comes from a publisher with 3 extensions and was last updated in December 2025.

Key findings

  • High

    Other

    The bundled manifest declares zero permissions and zero host_permissions, while the live CWS listing claims storage, declarativeNetRequest, optional downloads, host access to both [domain withheld] and [domain withheld], has_externally_connectable, and references and — files absent from this ZIP. The gap means the background worker and page-injected script present in the installed extension cannot be reviewed from this bundle; the discrepancy between the submitted ZIP and the live listing is itself a meaningful signal. User reviews also specifically call out the downloads permission as suspicious, consistent with the live manifest including optional_permissions: ["downloads"] not seen in this bundle.

Analyst notes

The bundled is clean TypeScript compiled under Webpack: the sole network call is a user-initiated POST to [domain withheld] (the extension's own declared host) to add an author to the ignore list, and innerHTML is used only to inject an SVG icon into the extension's own injected button — no exfiltration, no eval, no obfuscation. However, the live CWS manifest claims substantially more than the bundled ZIP: the published listing adds storage, declarativeNetRequest, optional downloads permission, [domain withheld] as a second host, externally_connectable, and references and — files entirely absent from this bundle — meaning a significant portion of the installed extension cannot be audited from the ZIP provided. The 50% malicious publisher rate (1 of 2 other extensions flagged) adds corroborating concern, though the ML score (0.27) and our own risk engine (0.00) both reflect only the clean ZIP contents.

Pikabu Fixes

Pikabu Fixes Chrome extension security report

ID: nochogffendelpmbpajbdpaodbibgdmk

Supported Languages

🇷🇺Russian

Extension Info & Metadata

Status
Active
Version
5.36.0
Size
0.21 MB
Rating
4.4/5
Reviews
102
Users
3,000
Type
Extension
Updated
Dec 28, 2025
Category
Social networking
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
3extensions
1 no longer listed

Publisher Contextual Analysis

Author
DESURE
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
3
Active
2
Obsolete
1
Listed
3
Unlisted
0
Users
3,169

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://pikabu.ru/*
Host
Medium
Host permission — access limited to this URL pattern.
https://api.pikabu.ru/*
Host
Medium
Host permission — access limited to this URL pattern.

28 indicators in this extension

28 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Приложение восстанавливает отображение минусов и возвращает бессрочный игнор авторов постов.

Read the publisher’s full description

- Отображение рейтинга комментариев и постов с учетом минусов. - Отображение цветового индикатора даты регистрации пользователя. - Кнопка в тулбаре поста, позволяющая добавить автора в игнор-лист навсегда одним кликом. - Отображение ссылок на скачивание видео для встроенного плеера пикабу. - Возможность добавлять индивидуальные теги для пользователей, которые сохраняются в заметках

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
12

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

28 indicators in this extension

28 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
5.36.0
Latest
0.21 MBNot scanned—
f1d4a2caa7b2d44078f5abc8cd8ad41d77ecf98984509fc4ecac7b7722f34de7
5.35.2
0.21 MBNot scanned—
f1d4a2caa7b2d44078f5abc8cd8ad41d77ecf98984509fc4ecac7b7722f34de7
5.35.1
0.21 MBNot scanned—
f1d4a2caa7b2d44078f5abc8cd8ad41d77ecf98984509fc4ecac7b7722f34de7
5.35.0
0.21 MBNot scanned—
f1d4a2caa7b2d44078f5abc8cd8ad41d77ecf98984509fc4ecac7b7722f34de7
5.34.0
0.21 MBNot scanned—
f1d4a2caa7b2d44078f5abc8cd8ad41d77ecf98984509fc4ecac7b7722f34de7
5.33.0
0.21 MBNot scanned—
f1d4a2caa7b2d44078f5abc8cd8ad41d77ecf98984509fc4ecac7b7722f34de7
5.32.4
0.20 MBNot scanned—
e26146375ea5bdf6f478e18f1f61173b63f5dfdc9ae0e5ffce48bb3d4ad528b0
5.29.0
0.21 MBNot scanned—
f1d4a2caa7b2d44078f5abc8cd8ad41d77ecf98984509fc4ecac7b7722f34de7
5.28.3
0.25 MBNot scanned—
f1d4a2caa7b2d44078f5abc8cd8ad41d77ecf98984509fc4ecac7b7722f34de7
5.24.1
0.34 MBNot scanned—
f1d4a2caa7b2d44078f5abc8cd8ad41d77ecf98984509fc4ecac7b7722f34de7
Showing 1 to 10 of 90 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Social Networking