Chrome Web StoreNo malware found
In code review (v0.7.1)
Our reviewer read version 0.7.1 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
47 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
RestMan, used by 50,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can read and change data on all websites.
Key findings
- High
Other
The bundled manifest declares manifest_version 2 and includes permissions 'tabs', '[domain withheld]', etc., while the published CWS listing summary shows manifest_version 3, host_permissions '*://*/*', and permissions ['storage']. This mismatch indicates the provided ZIP is an older version (0.7.1) than what is currently published (likely 0.8.0+). The publisher's changelog mentions migration to Manifest V3 in v0.8.0, so this difference is expected and not an indicator of malicious intent.
Analyst notes
The extension is a well-known REST API client. Its broad permissions are necessary for its function. No data is exfiltrated; all storage is local. The manifest mismatch is due to the provided ZIP being an older version (0.7.1) compared to the current store version (0.8.0+), and the publisher is trusted with a clean history. The ML model likely flagged the extension based on large JS bundle size, library patterns, and broad permissions, which are all expected for this category.
RestMan Chrome extension security report
ID: ihgpcfpkpmdcghlnaofdmjkoemnlijdi
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Joaquin Sargiotto
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
47 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
RESTMan is a browser extension to work on http requests.
Read the publisher’s full description
RESTMan is an extension to work on REST APIs over http and https. How to use: Click on the RESTMan Icon that displays on your taskbar. Type the url in the main input field and choose the method to use: GET/POST/PUT/DELETE/PATCH. Click on the arrow "Send" or press Ctrl+Enter. You'll see info about the response (time, size, type) and you'll be able to see the content response in the response section. What's new: # v0.8.0 New - #42 Migrate extension to Manifest V3. # v0.7.2 Fixes - #29 Disable "tabs" permission. # v0.7.1 Fixes - #29 Fixes browser's autocomplete dialog appearing on top of Restman's history dialog. # v0.7 Fixes - #23 Fixed background in method drop down on windows. New: - #25 Share request. - #24 Add OPTIONS to the list of http methods. # v0.6 Fixes: - #11 Different color for every HTTP method. - #18 Extension no longer uses resources when it's not being used. New: - New dark theme! Based on material design colors. - Side by side layout for Body and Response panels. - Options popup page to save theme and layout for future sessions. - Improved history dropdown. Adding ability to move through options with up/down keys, better mouse click handling, options get scrolled into view when out of scroll, pressing enter to select option. - More url space. - Improved "running" indicator. # v0.5 Fixes: - Fixed replacement of line endings in request editor. - Added error message for failed requests. New: - Improved history dialog. It now popus from the url bar, it filters entries based on what's been typed. - New HTML preview for responses. It will render the response as an html. Due to security issues, some scripts, images and other resources might be blocked. - Added extension version in main windows. # v0.3 - Major UI overhaul. - Extension won't duplicate entries in history. - Adding clear all button to headers and form body sections. - Ctrl+Enter sends request. - Pressing enter on url textbox sends request. - Several small fixes. # v0.2 - Updated foundation to 5.4.6 - Updated beautify to 1.5.4 - Minor UI tweaks. # v0.1 - GET, POST, PUT, PATCH, DELETE requests. - Custom request headers. - Raw and Form data body. - View highlighted response. - View response headers.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
47 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in Developer Tools
- GoFullPage - Full Page Screen Capture11,000,000 users
- touchenex 확장8,000,000 users
- TrendAI™ Toolbar for Enterprise7,000,000 users
- SentinelOne6,000,000 users
- React Developer Tools5,000,000 users