Extension Auditor
Sign Up
Chrome Web Store
15Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

111 indicators in this extension

111 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Rumi: Join the Watch Network, used by 1,000 people, is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It was last updated in April 2026.

Rumi: Join the Watch Network

Rumi: Join the Watch Network Chrome extension security report

ID: bfjmeipiilcbaacfdpbaomjenijihgba

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
0.9.54
Size
44.86 MB
Rating
5.0/5
Reviews
6
Users
1,000
Type
Extension
Updated
Apr 1, 2026
Category
Entertainment
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Author
Rumi
Privacy
Privacy Policy
Country
US
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
108 West 13th Street , Suite 100 Wilmington, DE 19801 Wilmington, DE 19801 US
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
1,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
tabCapture
Permission
High
This permission captures content and audio from browser tabs. Rated High because it can record sensitive web content, capture form input, and monitor user interactions.
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 25% increase: Unsafe code evaluation capabilities increase attack surface
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
system.cpu
Permission
Medium
This permission provides access to CPU usage and information. Rated Medium because it can monitor system performance, detect other applications, and potentially identify user activities.
system.memory
Permission
Medium
This permission accesses system memory information. Rated Medium because it can monitor memory usage patterns, detect other applications, and gather system state information.
https://api.mixpanel.com/track?ip=1
Host
Medium
Host permission — access limited to this URL pattern.
https://www.netflix.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://assets.nflxext.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://play.hbomax.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://app.rumi.io/*
Host
Medium
Host permission — access limited to this URL pattern.
wss://api.rumi.io/*
Host
Medium
Host permission — access limited to this URL pattern.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

111 indicators in this extension

111 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Run in-browser AI using your GPU to validate media watched.

Read the publisher’s full description

Overview Rumi is a free Chrome extension that gives you points for the minutes you stream on desktop. Add it to Chrome, start a session, and watch as usual. Every minute earns a point. Everything runs on your computer using on-device AI. No raw audio or video leaves your device. Rumi is built privacy-first, designed for people who want their attention to count for more. Key Features of Rumi: 1. Earn points as you stream: One point per minute of verified watch time. 2. On-device AI: All analysis happens locally on your computer. 3. Simple session control: Start and stop anytime from the Rumi icon. 4. Privacy first: No raw audio or video leaves your device. No cross-site tracking. 5. Early access: This is the first step in building the world’s real-time attention signal. How to Get Started with Rumi: 1. Install the Rumi extension from the Chrome Web Store. 2. Open the extension, register with your email or sign in with Google. 3. Start a session, stream as usual, and let Rumi do the rest. Why Use Rumi: - Earn points while you stream: Get credit for every verified minute you watch. - On-device AI: All analysis happens locally on your computer. - Privacy first: No raw audio or video ever leaves your device. - Simple control: Start or stop anytime with ease. Instructions for Using Rumi: 1. Tap Add to Chrome to install the extension. 2. Navigate to a supported video platform. 3. Click the Rumi icon and start watching. 4. Come back anytime to check your progress. Frequently Asked Questions: Q: Does Rumi store my video history or login credentials? A: No. Rumi only tracks the session indexing progress you’ve authorized and keeps your personal data private. Q: What streaming platforms does Rumi support? A: Rumi supports a growing list of platforms. Check the extension settings for the most up-to-date list. Q: Can I use Rumi across multiple tabs? A: Indexing works one tab at a time to ensure high-quality capture. You can switch tabs anytime while your session runs. Need Help or Have Feedback? Reach out anytime at hello@rumilabs.io, or on x at x.com/rumilabs.io Start with Rumi and make your attention count. Every session strengthens a new signal of what culture is watching.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up
URLs
77
IPv4
32

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

111 indicators in this extension

111 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
0.9.54
Latest
44.86 MBNot scanned—
165512c4e8ff7c91d085dc21e677f541304d8a7cedf6829ddeb797171d42add7
0.9.51
44.84 MBNot scanned—
165512c4e8ff7c91d085dc21e677f541304d8a7cedf6829ddeb797171d42add7
0.9.50
44.84 MBNot scanned—
165512c4e8ff7c91d085dc21e677f541304d8a7cedf6829ddeb797171d42add7
0.9.32
43.38 MBNot scanned—
56368a3b735457fd50c95798d12b58e71ea526c5b389e958041919c67720c85c
0.9.31
43.46 MBNot scanned—
56368a3b735457fd50c95798d12b58e71ea526c5b389e958041919c67720c85c
0.9.30
43.46 MBNot scanned—
56368a3b735457fd50c95798d12b58e71ea526c5b389e958041919c67720c85c
0.9.29
43.46 MBNot scanned—
56368a3b735457fd50c95798d12b58e71ea526c5b389e958041919c67720c85c
0.9.25
43.45 MBNot scanned—
56368a3b735457fd50c95798d12b58e71ea526c5b389e958041919c67720c85c
0.9.21
38.62 MBNot scanned—
56368a3b735457fd50c95798d12b58e71ea526c5b389e958041919c67720c85c
0.9.19
37.60 MBNot scanned—
56368a3b735457fd50c95798d12b58e71ea526c5b389e958041919c67720c85c
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up

Related extensions