Extension Auditor
Extension Auditor
Sign Up

Playspeed

ID: dgdpebjegmddbloaoiggfpdmkjmgiajj

Could be malicious

Supported Languages

🇧🇩Bengali
🇧🇷Brazilian Portuguese
🇬🇧British English
🇧🇬Bulgarian
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇭🇷Croatian
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇪🇪Estonian
🇵🇭Filipino
🇫🇷French
🇩🇪German
🇬🇷Greek
🇮🇳Gujarati
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇲🇽Latin American Spanish
🇱🇻Latvian
🇱🇹Lithuanian
🇲🇾Malay
🇮🇳Malayalam
🇮🇳Marathi
🇳🇴Norwegian
🇵🇱Polish
🇵🇹Portuguese
🇷🇴Romanian
🇷🇺Russian
🇷🇸Serbian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇸🇪Swedish
🇮🇳Tamil
🇮🇳Telugu
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇺🇸US English
🇻🇳Vietnamese

Extension Info & Metadata

Status
Removed
Version
2.14.0
Size
0.56 MB
Rating
3.6/5
Reviews
22
Users
601,572
Type
Extension
Updated
Sep 10, 2021
Category
7_productivity
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Author
Meike SauerView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
601,572

Easily manage playback speed with Playspeed

Playspeed adds speed control buttons to online videos. You can increase or decrease video speed even if the video site doesn't support this feature. Features: - Shows control box over video players - Increase and decrease playback speed - You can hide controls with the close button How to use shortcuts: S - slow down D - increase speed R - revert to the default

Item
Type
Severity
Description
<all_urls>
Permission
Critical
This permission grants access to all websites without restriction. Rated High because it can access any web content, monitor all web activity, and potentially steal sensitive data across all sites.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2

By severity

Critical1
High1
Medium1
Low2

Versions scanned

Showing 2 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
2.13.202
2.13.193

Files with findings

2 distinct paths — top paths by unique finding count:

  • background.js3
  • inject.js2
S.No.
Category
Severity
File
Summary
Found in Version
1Remote Code Loading
critical
background.js (line 6596)This code dynamically constructs and injects a Google Tag Manager script URL (`gtm.js?id=GTM-NDPVNZ3`) into the background page, causing remote JavaScript to execute outside the reviewed extension package. It uses ind…
2.13.20
2Tracking
high
background.js (line 6596)Beyond loading remote code, this snippet initializes a GTM data layer (`window["map1"]`) and hard-codes a container ID, indicating background-page analytics/tracking. The implementation is deliberately obfuscated with…
2.13.20
3Other
medium
inject.js (line 1)The entire content script logic is wrapped inside a callback to `chrome.extension.sendMessage({}, ...)` — a deprecated API that sends an empty object `{}` with no matching handler in background.js. The response variab…
2.13.19
4Code Injection
low
background.js (line 5)The background script dynamically injects `inject.js` into the active tab when a `toggle_ext` message is received from any sender. The `chrome.tabs.executeScript` call does not specify a `tabId`, meaning it targets th…
2.13.19
5Unauthorized Data Collection
low
inject.js (line 214)Uses the deprecated `DOMNodeInserted` mutation event, which fires synchronously for every single DOM insertion across the entire page on all URLs (`<all_urls>`). While the stated use is to detect new video elements, t…
2.13.19
URLs
4
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
getbootstrap.com-https://getbootstrap.com/
github.com/twbs/bootstrap/blob/master/LICENSEhttps://github.com/twbs/bootstrap/blob/master/LICENSE
www.w3.org/2000/svghttp://www.w3.org/2000/svg
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Showing 1 to 3 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In