Caution required
Suspicious in code review (v0.0.0.2)
Our reviewer found behaviour consistent with malware in version 0.0.0.2, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
28 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Pikabu Fixes, used by 3,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. It comes from a publisher with 3 extensions and was last updated in December 2025.
Key findings
- High
Other
The bundled manifest declares zero permissions and zero host_permissions, while the live CWS listing claims storage, declarativeNetRequest, optional downloads, host access to both [domain withheld] and [domain withheld], has_externally_connectable, and references and — files absent from this ZIP. The gap means the background worker and page-injected script present in the installed extension cannot be reviewed from this bundle; the discrepancy between the submitted ZIP and the live listing is itself a meaningful signal. User reviews also specifically call out the downloads permission as suspicious, consistent with the live manifest including optional_permissions: ["downloads"] not seen in this bundle.
Analyst notes
The bundled is clean TypeScript compiled under Webpack: the sole network call is a user-initiated POST to [domain withheld] (the extension's own declared host) to add an author to the ignore list, and innerHTML is used only to inject an SVG icon into the extension's own injected button — no exfiltration, no eval, no obfuscation. However, the live CWS manifest claims substantially more than the bundled ZIP: the published listing adds storage, declarativeNetRequest, optional downloads permission, [domain withheld] as a second host, externally_connectable, and references and — files entirely absent from this bundle — meaning a significant portion of the installed extension cannot be audited from the ZIP provided. The 50% malicious publisher rate (1 of 2 other extensions flagged) adds corroborating concern, though the ML score (0.27) and our own risk engine (0.00) both reflect only the clean ZIP contents.
Pikabu Fixes Chrome extension security report
ID: nochogffendelpmbpajbdpaodbibgdmk
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- DESURE
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
28 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Приложение восстанавливает отображение минусов и возвращает бессрочный игнор авторов постов.
Read the publisher’s full description
- Отображение рейтинга комментариев и постов с учетом минусов. - Отображение цветового индикатора даты регистрации пользователя. - Кнопка в тулбаре поста, позволяющая добавить автора в игнор-лист навсегда одним кликом. - Отображение ссылок на скачивание видео для встроенного плеера пикабу. - Возможность добавлять индивидуальные теги для пользователей, которые сохраняются в заметках
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
28 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
More from DESURE
- MegaMarket - Мониторинг цен133 users
- Router Helper для Keenetic36 users
Popular in Social Networking
- Cisco Webex Extension22,000,000 users
- Mosaic Wallet4,000,000 users
- LINE4,000,000 users
- Google Mail Checker2,000,000 users
- Bitmoji2,000,000 users