Chrome Web Store
48Versions
1Code reviewed

No malware found

In code review (v0.77)

Our reviewer read version 0.77 โ€” the most recent version we have reviewed โ€” and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Secure Shell, used by 800,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in September 2026.

The extension is a legitimate client developed by Google for Chrome. All permissions (clipboard read/write, storage, unlimitedStorage, terminalPrivate, fileSystemProvider, etc.) are required for terminal emulation, file mounting, and SSH functionality. The 'wasm-unsafe-eval' directive is needed to load the WASM-based SSH binary. Network connections are only made to user-specified SSH servers or Google's own relay servers for corporate use. The optional host_permissions (' ' and ' ') are for internal Google metrics and are only actively used after user opt-in. No unauthorized data exfiltration, obfuscation, or code injection was found. The ML model's risk indicators (high clipboard risk, unsafe WebAssembly, storage quotas) are all normal for this category of extension and do not reflect malicious intent. Positive signals: extension is featured, built by Google, has high user rating, large user base, and publisher has a perfect record.

Secure Shell

Secure Shell Chrome extension security report

ID: iodihamcpbpeioajjeobimgagajmlibd

Supported Languages

๐Ÿ‡ช๐Ÿ‡นAmharic
๐Ÿ‡ธ๐Ÿ‡ฆArabic
๐Ÿ‡ง๐Ÿ‡ฉBengali
๐Ÿ‡ง๐Ÿ‡ทBrazilian Portuguese
๐Ÿ‡ฌ๐Ÿ‡งBritish English
๐Ÿ‡ง๐Ÿ‡ฌBulgarian
๐Ÿ‡ช๐Ÿ‡ธCatalan
๐Ÿ‡จ๐Ÿ‡ณChinese (Simplified)
๐Ÿ‡น๐Ÿ‡ผChinese (Traditional)
๐Ÿ‡ญ๐Ÿ‡ทCroatian
๐Ÿ‡จ๐Ÿ‡ฟCzech
๐Ÿ‡ฉ๐Ÿ‡ฐDanish
๐Ÿ‡ณ๐Ÿ‡ฑDutch
๐Ÿ‡บ๐Ÿ‡ธEnglish
๐Ÿ‡ช๐Ÿ‡ชEstonian
๐Ÿ‡ต๐Ÿ‡ญFilipino
๐Ÿ‡ซ๐Ÿ‡ฎFinnish
๐Ÿ‡ซ๐Ÿ‡ทFrench
๐Ÿ‡ฉ๐Ÿ‡ชGerman
๐Ÿ‡ฌ๐Ÿ‡ทGreek
๐Ÿ‡ฎ๐Ÿ‡ณGujarati
๐Ÿ‡ฎ๐Ÿ‡ฑHebrew
๐Ÿ‡ฎ๐Ÿ‡ณHindi
๐Ÿ‡ญ๐Ÿ‡บHungarian
๐Ÿ‡ฎ๐Ÿ‡ฉIndonesian
๐Ÿ‡ฎ๐Ÿ‡นItalian
๐Ÿ‡ฏ๐Ÿ‡ตJapanese
๐Ÿ‡ฎ๐Ÿ‡ณKannada
๐Ÿ‡ฐ๐Ÿ‡ทKorean
๐Ÿ‡ฒ๐Ÿ‡ฝLatin American Spanish
๐Ÿ‡ฑ๐Ÿ‡ปLatvian
๐Ÿ‡ฑ๐Ÿ‡นLithuanian
๐Ÿ‡ฒ๐Ÿ‡พMalay
๐Ÿ‡ฎ๐Ÿ‡ณMalayalam
๐Ÿ‡ฎ๐Ÿ‡ณMarathi
๐Ÿ‡ณ๐Ÿ‡ดNorwegian
๐Ÿ‡ฎ๐Ÿ‡ทPersian
๐Ÿ‡ต๐Ÿ‡ฑPolish
๐Ÿ‡ต๐Ÿ‡นPortuguese
๐Ÿ‡ท๐Ÿ‡ดRomanian
๐Ÿ‡ท๐Ÿ‡บRussian
๐Ÿ‡ท๐Ÿ‡ธSerbian
๐Ÿ‡ธ๐Ÿ‡ฐSlovak
๐Ÿ‡ธ๐Ÿ‡ฎSlovenian
๐Ÿ‡ช๐Ÿ‡ธSpanish
๐Ÿ‡ฐ๐Ÿ‡ชSwahili
๐Ÿ‡ธ๐Ÿ‡ชSwedish
๐Ÿ‡ฎ๐Ÿ‡ณTamil
๐Ÿ‡ฎ๐Ÿ‡ณTelugu
๐Ÿ‡น๐Ÿ‡ญThai
๐Ÿ‡น๐Ÿ‡ทTurkish
๐Ÿ‡บ๐Ÿ‡ฆUkrainian
๐Ÿ‡ป๐Ÿ‡ณVietnamese

Extension Info & Metadata

Status
Active
Version
0.81
Size
6.15 MB
Rating
4.1/5
Reviews
254
Users
800,000
Type
Extension
Updated
Sep 16, 2026
Category
Developer tools
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
Yes
Trusted
Yes
This publisherTrack record
2extensions
All still listed
Scanned by Extension Auditor โ€” Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
https://hterm.org
Country
IE
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
Gordon House Barrow Street Dublin 4 D04 E5W5 IE
Website
Visit
Extensions
2
Active
1
Obsolete
0
Listed
1
Unlisted
1
Users
1,000,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
clipboardRead
Permission
High
This permission allows reading clipboard content. Rated High because it can steal copied passwords, sensitive data, and monitor all content copied to clipboard.
clipboardWrite
Permission
High
This permission allows modification of clipboard content. Rated High because it can inject malicious content into the clipboard, modify copied passwords, and manipulate copied data.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk: โ€ข 25% increase: Unsafe code evaluation capabilities increase attack surface
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
idle
Permission
Low
This permission detects system idle state. Rated Low because it only observes user activity state without access to activity details.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
fileSystemProvider
Permission
Low
This permission implements a virtual file system interface. Rated Low because it only provides a file system interface without direct access to the user's actual files.
accessibilityFeatures.read
Permission
Low
This permission reads accessibility settings. Rated Low because it only accesses accessibility configuration without user data.
terminalPrivate
Permission
Unknown
No classification available for this permission.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

About this extension

Terminal emulator and SSH and SFTP client.

Read the publisherโ€™s full description

Secure Shell is an xterm-compatible terminal emulator and stand-alone ssh client for Chrome. It uses Native-Client to connect directly to ssh servers without the need for external proxies. A SFTP command line client is included. On ChromeOS, you can create SFTP mounts and access them from the Files app! An alpha build of Mosh is included now too. It has been well tested for a couple of years. Please read the FAQ, available here: https://hterm.org/x/ssh/faq. You can also exchange feedback in the chromium-hterm mailing list, available here: https://hterm.org/x/ssh/contact. The changelog is available here: https://hterm.org/x/ssh/changelog

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
0.81
Latest
6.15 MBNot scannedโ€”
b0eacde1eb29462361f73f1e9e8b2cb703870cefe913d9241bffaa2b70835385
0.80
6.15 MBNot scannedโ€”
10faae9e98719e7e21e8237458c65d6bceb2d14d059a9eb6fe569dc50a1b47ba
0.75
6.29 MBNot scannedโ€”
10faae9e98719e7e21e8237458c65d6bceb2d14d059a9eb6fe569dc50a1b47ba
0.79
6.15 MBNot scannedโ€”
b0eacde1eb29462361f73f1e9e8b2cb703870cefe913d9241bffaa2b70835385
0.78
6.29 MBNot scannedโ€”
b0eacde1eb29462361f73f1e9e8b2cb703870cefe913d9241bffaa2b70835385
0.77
6.29 MBNo malware found0
b0eacde1eb29462361f73f1e9e8b2cb703870cefe913d9241bffaa2b70835385
0.76
6.29 MBNot scannedโ€”
b0eacde1eb29462361f73f1e9e8b2cb703870cefe913d9241bffaa2b70835385
0.74
6.29 MBNot scannedโ€”
b0eacde1eb29462361f73f1e9e8b2cb703870cefe913d9241bffaa2b70835385
0.73
6.35 MBNot scannedโ€”
b0eacde1eb29462361f73f1e9e8b2cb703870cefe913d9241bffaa2b70835385
0.72
6.36 MBNot scannedโ€”
b0eacde1eb29462361f73f1e9e8b2cb703870cefe913d9241bffaa2b70835385
Showing 1 to 10 of 50 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

More from https://hterm.org

Popular in Developer Tools