Chrome Web StoreCaution required
Suspicious in code review (v2.26.1)
Our reviewer found behaviour consistent with malware in version 2.26.1, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
What our analysis found
Pocket Universe, used by 100,000 people, is rated caution by Extension Auditor. Our code review reported 2 findings (1 high, 1 medium), led by other. It comes from a trusted publisher and was last updated in October 2026.
Key findings
- High
Other
The bundled manifest declares `sidePanel` (line 38) and `offscreen` (line 39) permissions that are absent from the published CWS manifest. The published manifest additionally lists `file://*/*` in host_permissions, which the bundled manifest omits. Because `sidePanel` and `offscreen` cannot be acquired at runtime—they must be in the installed manifest—users approved a narrower permission scope than what the extension actually holds. This divergence between disclosed and actual permissions is a meaningful integrity concern for an extension that handles wallet transaction signing.
- Medium
Obfuscation
The build system injects documentation strings explicitly asserting that the visible API domain strings are decoy 'honeypot' aliases and that real network traffic is domain-fronted through Cloudflare Workers in a way designed to evade network monitoring. Companion comments in aster-consent-bridge. (lines 447–452, 1042–1043) make parallel claims: visible postMessage event types deliver only 'synthetic honeypot data' while real inter-context messaging uses ECDH-derived encrypted BroadcastChannel, and visible storage keys are write-only honeypots while real storage uses opaque HKDF-derived IndexedDB identifiers. These strings are dead code (assigned to unused variables), but the explicit intent to present false artifacts to code analysis tools—rather than merely encrypting communications for security—is an unusual anti-analysis posture that cannot be reconciled with the visible source alone. Without the background service worker the claims are unverifiable.
Analyst notes
Pocket Universe is a well-established Web3 security extension (4+ years, 100K users, Google, ML score 0.00) whose core function—intercepting transactions to warn on scams and collecting builder fees from DeFi protocols—explains its broad permissions and all-site content scripts. Two concrete concerns prevent a clean clearance: (1) the bundled manifest includes `sidePanel` and `offscreen` permissions absent from the published CWS manifest, meaning the extension operates with elevated permissions beyond what users approved at install time; (2) build-transform comment strings in relay-website. and aster-consent-bridge. explicitly state that visible API domains, message type strings, and storage keys are injected as 'honeypot' decoys and that real traffic, messaging, and storage use encrypted, opaque channels designed to be undetectable by network monitoring and code analysis—language that goes well beyond standard anti-tamper hardening. The third-party likelihood score () and corroboration signals (publisher trust, user count, age) favor a legitimate product, but the anti-analysis documentation and permission mismatch warrant a suspicious rather than benign rating, particularly without access to the background service worker where the claimed hidden behavior would reside.
Pocket Universe Chrome extension security report
ID: gacgndbocaddlemdiaadajmlggabdeod
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://pocketuniverse.app
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- US
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Address
- 254 Chapman Rd ste 209 Newark, DE 19702 US
- Website
- Visit
Email Change History
Screenshots & videos
Install growth
No Security Analysis Available
Security analysis has not been performed for this extension version yet.
About this extension
Protects your assets from scams.
Read the publisher’s full description
Join Pocket Universe, the security tool that protects you from scams. ☔ Every Pocket Universe user can get transaction coverage up to $20,000 (it’s optional and comes with a fee) 🛡️ We protect over 200K+ users. Add our extension to your browser and transact like normal. We’ll pop up before your wallet so that you can: 1️⃣ See what you’re signing See what assets are being moved in every web3 transaction. 2️⃣ Get clear warnings on scams We detect malicious transactions designed to steal your assets. It takes one click to install and you don’t need to connect your wallet. Get your peace of mind back with Pocket Universe.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
No network indicators were extracted from this version.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in make_chrome_yours/privacy
- uBlock Origin18,000,000 users
- ESET Browser Privacy & Security7,000,000 users
- Free VPN ZenMate-Best VPN for Chrome4,000,000 users
- Ghostery AdBlocker for Privacy2,000,000 users
- Dashlane — Password Manager1,000,000 users