Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Save image as Type

CRITICAL RISKRemoved from Chrome Web Store

Save image as Type

ID: gabfmnliflodkdafenbcpjdlppllnemd

Could be malicious

Supported Languages

🇸🇦Arabic

🇧🇷Brazilian Portuguese

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇺🇸English

🇫🇷French

🇩🇪German

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇵🇹Portuguese

🇷🇺Russian

🇪🇸Spanish

🇺🇦Ukrainian

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.7.2

Size

0.25 MB

Rating

4.0/5

Reviews

2,120

Users

1,000,000

Type

Extension

Updated

Feb 18, 2026

Publisher Contextual Analysis

Trusted

Author: laurenbridgecoolView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

1,000,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Save image as PNG, JPG or WebP by context menu on image.

Add context menu for images to save image as PNG, JPG or WebP format. There is an old Save Image As Type 1.0.5 extension created by another developer but cannot run now. I developed this new extension based on the old one. This extension is open source. No information is collected. No ads. No login or registration. Multiple languages supported. Release notes: 2015-02-08 - First release. 2023-05-11 - Migrate to chrome extension manifest version 3. - Use service worker instead of content script, as chrome recommended. - Add some languages 2023-05-22 - Fix bug for chrome 108 and older versions. - Add some languages

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 236 ratings+3 (1%)

Average Rating

Current: 3.96 / 5.0-0.12

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High3

Medium2

Low0

Versions scanned

Showing 1 of 15 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.7.2 Code review	8

Extension Version	Code Review Findings
1.7.2	8

Files with findings

3 distinct paths — top paths by unique finding count:

inject.js5
background.js2
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	inject.js (line 20269)	On every page load, the content script checks if the current hostname matches any URL from the remotely-supplied list (`"SC"` storage key). If matched, it creates a full-viewport invisible iframe (`visibility: hidden`…	1.7.2
2	Remote Code Loading	critical	inject.js (line 22071)	The extension makes a remote HTTP GET request to `https://www.saveimgastype.com/v1/feature-flags` using Axios with a random cache-buster parameter to prevent caching. The response is used to receive dynamic configurat…	1.7.2
3	Remote Code Loading	critical	inject.js (line 22153)	When the remote server returns an `extraImageCondition` value, it is stored in `chrome.storage.local` under the key `"SC"` using an obfuscated encoding scheme. This array of URLs—entirely controlled by the remote oper…	1.7.2
4	Code Injection	high	inject.js (line 20226)	The `Yn()` function—called on every page load—reads the remotely-supplied target URL list from obfuscated storage and matches it against the current page's hostname using a regex anchored at the end of the domain (`$`…	1.7.2
5	Obfuscation	high	inject.js (line 22106)	The `mo()` function implements multi-stage evasion logic before calling the remote server: it skips root paths, requires 25–155+ images on the page, throttles calls for up to 36 hours via localStorage, and tracks inst…	1.7.2
6	Obfuscation	high	background.js (line 407)	The extension encodes all sensitive values written to `chrome.storage.local` using a custom obfuscation scheme: JSON-stringify the value, reverse the string, apply a Caesar cipher (+3 on each character code), then pre…	1.7.2
7	Other	medium	background.js (line 613)	After exactly 30 downloads, the background script sends a `SHOW_REVIEW_POPUP` message to the active tab. The content script renders a full-page overlay modal over the current website soliciting a Chrome Web Store revi…	1.7.2
8	Unauthorized Data Collection	medium	manifest.json (line 26)	The content script `inject.js` (834 KB, includes React, Axios, and styled-components) is injected into every HTTP and HTTPS page the user visits, with only static file extensions excluded. This grants the extension ex…	1.7.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


react.dev	/errors/	https://react.dev/errors/
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1998/Math/MathML	http://www.w3.org/1998/Math/MathML
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/XML/1998/namespace	http://www.w3.org/XML/1998/namespace
github.com	/styled-components/styled-components/blob/main/packages/styled-components/src/utils/errors.md	https://github.com/styled-components/styled-components/blob/main/packages/styled-components/src/utils/errors.md#
chromewebstore.google.com	/detail/save-image-as-type/gabfmnliflodkdafenbcpjdlppllnemd	https://chromewebstore.google.com/detail/save-image-as-type/gabfmnliflodkdafenbcpjdlppllnemd
fb.me	/use-check-prop-types	http://fb.me/use-check-prop-types
chromewebstore.google.com	/detail/save-image-as-type/gabfmnliflodkdafenbcpjdlppllnemd/reviews	https://chromewebstore.google.com/detail/save-image-as-type/gabfmnliflodkdafenbcpjdlppllnemd/reviews
localhost	-	http://localhost

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.8 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

BEST EXTENSION I'm USING THIS FROM LAST 3-4 YEARS SOLVED ALL MY PROBLEMS ❤

VEDIK·14 Mar 2026

melhor extensão de todas

MF DOOM·14 Mar 2026

This app is a life saver. I use it more than once per day. I think it is the most useful extension out there.

Paul Salcido·13 Mar 2026

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Save image as Type

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 15 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating