Chrome Web Store
3Versions
1Code reviewed

No malware found

In code review (v2.2.6)

Our reviewer read version 2.2.6 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

15 indicators in this extension

15 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

RSS Subscription Extension (by Google), used by 400,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in July 2024.

Analyst notes

The extension is a legitimate RSS subscription tool by Google. All network activity (XMLHttpRequest) is limited to fetching the user-requested feed URL for, with no data exfiltration. No remote code loading, obfuscation, or suspicious data collection is present. The ML model likely flagged the broad host permissions and DOM manipulation patterns typical of content-script-based extensions, but these are fully consistent with the extension's stated purpose.

RSS Subscription Extension (by Google)

RSS Subscription Extension (by Google) Chrome extension security report

ID: nlbjncdgjeocebhnmkbbbdekmmmcbfjd

Supported Languages

🇸🇦Arabic
🇧🇷Brazilian Portuguese
🇬🇧British English
🇧🇬Bulgarian
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇭🇷Croatian
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇪🇪Estonian
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇬🇷Greek
🇮🇱Hebrew
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇲🇽Latin American Spanish
🇱🇻Latvian
🇱🇹Lithuanian
🇳🇴Norwegian
🇵🇱Polish
🇵🇹Portuguese
🇷🇴Romanian
🇷🇺Russian
🇷🇸Serbian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇸🇪Swedish
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
2.2.9
Size
0.15 MB
Rating
4.0/5
Reviews
3,400
Users
400,000
Type
Extension
Updated
Jul 4, 2024
Category
News & weather
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
rss-subscription-extension-owners@google.com
Country
IE
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
Gordon House Barrow Street Dublin 4 D04 E5W5 IE
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
400,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
http://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

15 indicators in this extension

15 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Adds one-click subscription to your toolbar.

Read the publisher’s full description

This extension auto-detects RSS feeds on the page you are reading and upon finding one will display an RSS icon in the Omnibox, allowing you to click on it to preview the feed content and subscribe using your favorite feed reader. The extension comes with a few feed readers predefined (Newsblur, My Yahoo, Feedly, Inoreader, The Old Reader) but also allows you to add any web-based feed reader of your choice to the list. What's new in version 2.2.8? + Minor bugfix. What's new in version 2.2.8? + Updated to extension manifest version 3. + Changed the Feed link in Preview page to Copy feed url to clipboard. What's new in version 2.2.7? + Fixed truncation in feed preview. What's new in version 2.2.6? + Added a couple of more Feed reader services. What's new in version 2.2.5? + This version contains security fixes. + Replaced deprecated Bloglines RSS service with Newsblur. What's new in version 2.2.2? + Doesn't run in the background all the time, only when in use. + Updated to not use a soon-to-be-deprecated API. What's new in version 2.2.1? + Removed Google Reader and iGoogle from the list of default feed readers. What's new in version 2.1? + This extension is now available in over 40 languages. + If you see localization problems, let us know: http://crbug.com/37233 Changelist: + Navigating to feed pages directly now takes you to the subscription page (instead of showing XML). + Found a feed where this doesn't happen? Let us know: http://crbug.com/32967 + Added an Options page for configuring feed readers. + Added an option to skip the feed preview page when subscribing. + Added a link to the preview page for those wanting to copy the direct feed link (look for the [ Feed ] link in the blue bar). + Added support for multiple feeds per page.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
8

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

15 indicators in this extension

15 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
2.2.7
Latest
0.14 MBNot scanned—
46fec9fd30686f380d362b2a2d79508e0c08a2e8e71f971bde548158f7a2b4c0
2.2.6
0.14 MBNo malware found0
46fec9fd30686f380d362b2a2d79508e0c08a2e8e71f971bde548158f7a2b4c0
2.2.9
0.15 MBNot scanned—
cdd70be294b54b3cb98828d1801c2f235c2ef3b36f37499649f01de2a7098bd8
Showing 1 to 3 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in News & Weather