Chrome Web Store

18Versions

1Code reviewed

No malware found

In code review (v1.27)

Our reviewer read version 1.27 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

291 indicators in this extension

291 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

What our analysis found

Salesforce Inspector Reloaded, used by 400,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in October 2026.

Analyst notes

The extension is a well-known, high-rated Salesforce developer tool. The code interacts exclusively with Salesforce domains and uses cookies only for session management, as required for its functionality. All network requests are to Salesforce APIs or the publisher's own GitHub The uninstall URL points to a feedback form, not a tracker. The ML model likely overfit on the cookies permission and high counts of calls, which are expected for a REST API client. No data exfiltration, obfuscation, or malicious behavior found.

Salesforce Inspector Reloaded Chrome extension security report

ID: hpijlohoihegkfehhibggnkbjhoemldh

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

2.0

Size

1.08 MB

Rating

4.8/5

Reviews

217

Users

400,000

Type

Extension

Updated

Oct 7, 2026

Publisher Contextual Analysis

Trusted

Author: Thomas Prouvot
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

550,219

Screenshots & videos

Install growth

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

See plans

React Flow

Internal permhash`ffb6188be2…`
No malicious matches

2 other extensions carry this fingerprint, none of them known malicious.

Withheldnot flagged
Withheldnot flagged

Permhash (Mandiant)`0ab7476683…`
Too common to be evidence

1,254 other extensions carry this fingerprint, 532 of them known malicious. A permission set this common is not evidence on its own; the most installed members are listed for reference.

Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
+1,247 more

Network indicators

291 URLs and 0 IP literals were extracted from this version.

Item	Type	Severity	Description
cookies	Permission	High	This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://.salesforce.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://.salesforce-setup.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://.force.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://.cloudforce.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://.visualforce.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://.sfcrmapps.cn/	Host	Medium	Host permission — access limited to this URL pattern.
https://.sfcrmproducts.cn/	Host	Medium	Host permission — access limited to this URL pattern.
https://.salesforce.mil/	Host	Medium	Host permission — access limited to this URL pattern.
https://.force.mil/	Host	Medium	Host permission — access limited to this URL pattern.
https://.cloudforce.mil/	Host	Medium	Host permission — access limited to this URL pattern.
https://.visualforce.mil/	Host	Medium	Host permission — access limited to this URL pattern.
https://.crmforce.mil/	Host	Medium	Host permission — access limited to this URL pattern.
https://.force.com.mcas.ms/	Host	Medium	Host permission — access limited to this URL pattern.
https://.builder.salesforce-experience.com/	Host	Medium	Host permission — access limited to this URL pattern.

291 indicators in this extension

291 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

About this extension

Productivity tools for Salesforce administrators and developers to inspect data and metadata directly from the Salesforce UI.

Read the publisher’s full description

This extension is based on the original Salesforce inspector extension made by Søren Krabbe. IMPORTANT: If you have any question or facing bugs, please use the GitHub repository : https://github.com/tprouvot/Salesforce-Inspector-reloaded/issues Salesforce Inspector Reloaded contains lots of new features: - Download Metadata & Org Limit rework - Security improvements - Field Creator page to bulk create fields from the extension - Event Monitor page to subscribe to Platform Events from the browser - Import / Export configuration from Option page - Customise extension shortcuts - Support SOSL and GraphQL languages - REST Explore page to run any API from the extension without external tool - Load recent records from popup - Customize extension favicon and Sandbox banner - Check QueryPlan on data export - Enable Logs from User tab - Customize settings in Option page - New Org tab - Search for a particular flow, profile or permission set from Shortcut tab - Restrict Salesforce Inspector usage with a default connected app - New "Shortcut" tab to quickly access setup menu - Link to permission sets assignment from User tab And many more ! https://tprouvot.github.io/Salesforce-Inspector-reloaded/

User reviews

3.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Seeing a very common issue with constantly having to refresh to see the 'Show all data' or not able to see the show all data at all on specific records

Cody Dobbs·5 Oct 2026

Facing frequent issue with show all fields. Most of the time i need to refresh the page to show the option. The earlier versions were very quick in showing this show all fields.

Rono Thomas·30 Sept 2026

It's fine for the most part, just don't understand why the developer would remove the 'x' to clear out fields. It's absolutely annoying to have to highlight a field and then click delete. I miss being able to just click the 'x'. Whomever decided that was an "upgrade" should rethink this. What took one step now takes two. That's not an improvement; it's a degradation.

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

291

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

291 indicators in this extension

291 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

Version	Size	Verdict	Findings	Permhash
2.0 Latest	1.08 MB	Not scanned	—	0ab7476683ff563a3c399704de25a7a49120632675e7a4cf90687814ec2d7ca1
1.27	0.85 MB	No malware found	0	2f0030c535193fc164e4e2b5371e8e676510cf0a64b2689d9aba6533e6ddea82
1.260	N/A	Not scanned	—	2f0030c535193fc164e4e2b5371e8e676510cf0a64b2689d9aba6533e6ddea82
1.250	N/A	Not scanned	—	2f0030c535193fc164e4e2b5371e8e676510cf0a64b2689d9aba6533e6ddea82
1.240	N/A	Not scanned	—	2f0030c535193fc164e4e2b5371e8e676510cf0a64b2689d9aba6533e6ddea82
1.24	0.95 MB	Not scanned	—	2f0030c535193fc164e4e2b5371e8e676510cf0a64b2689d9aba6533e6ddea82
1.23	0.92 MB	Not scanned	—	2f0030c535193fc164e4e2b5371e8e676510cf0a64b2689d9aba6533e6ddea82
1.22	0.85 MB	Not scanned	—	2f0030c535193fc164e4e2b5371e8e676510cf0a64b2689d9aba6533e6ddea82
1.21	0.82 MB	Not scanned	—	2f0030c535193fc164e4e2b5371e8e676510cf0a64b2689d9aba6533e6ddea82
1.20.1	0.81 MB	Not scanned	—	2f0030c535193fc164e4e2b5371e8e676510cf0a64b2689d9aba6533e6ddea82

Showing 1 to 10 of 20 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in productivity/developer

CryptoPro Extension for CAdES Browser Plug-in10,000,000 users
EditThisCookie2,000,000 users
Device Recovery Utility2,000,000 users
netPlus: бесперебойный доступ к сайтам!1,151,142 users
Slush — A Sui wallet800,000 users

No malware found

291 indicators in this extension

What our analysis found