Chrome Web Store

20Versions

0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

54 indicators in this extension

54 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

What our analysis found

SLyrics, used by 3,000 people, is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in May 2026.

SLyrics Chrome extension security report

ID: mkjfooclbdgjdclepjeepbmmjaclipod

Supported Languages

🇺🇸English

🇮🇱Hebrew

Extension Info & Metadata

Status

Active

Version

1.6.14

Size

0.46 MB

Rating

4.4/5

Reviews

112

Users

3,000

Type

Extension

Updated

May 29, 2026

Publisher Contextual Analysis

Trusted

Author: xianqiao.wang
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

3,514

Screenshots & videos

Install growth

User Growth

Showing data from Jul 26, 2025 to Jul 25, 2026

Versions

+25%(+1,000 users)

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 126 ratings+1 (1%)

Average Rating

Current: 4.48 / 5.0+0.03

See plans

React Flow

Internal permhash`ba48273853…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Permhash (Mandiant)`4ed09905fa…`
No malicious matches

4 other extensions carry this fingerprint, none of them known malicious.

Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged

Network indicators

54 URLs and 0 IP literals were extracted from this version.

Item	Type	Severity	Description
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
://open.spotify.com/	Host	Medium	Host permission — access limited to this URL pattern.
://music.163.com/	Host	Medium	Host permission — access limited to this URL pattern.
://www.deezer.com/	Host	Medium	Host permission — access limited to this URL pattern.
://music.youtube.com/	Host	Medium	Host permission — access limited to this URL pattern.
://music.apple.com/	Host	Medium	Host permission — access limited to this URL pattern.
://listen.tidal.com/	Host	Medium	Host permission — access limited to this URL pattern.
Early Content Script Execution	Risk Factor	Medium	This extension runs content scripts at document_start.
contextMenus	Permission	Low	This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

54 indicators in this extension

54 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

About this extension

Instant synchronized lyrics display in picture-in-picture window

Read the publisher’s full description

Click the button (or press the `L` key) to display the lyrics Feature: 1. Support displaying sync lyrics in the picture-in-picture window 2. Support Spotify, Apple Music, Youtube Music, Deezer Premium 3. Support custom lyrics style 4. Support edit/upload/download lyrics Recommended installation as PWA Source Code: https://github.com/mantou132/Spotify-Lyrics Privacy Policy: https://spotify-lyrics-extension.netlify.app/privacy-policy.html Lyrics Match Success Rate: https://github.com/mantou132/Spotify-Lyrics#match-success-rate Changelog: https://github.com/mantou132/Spotify-Lyrics/releases If you have some ideas about this extension, please contact me. If you find it useful, please share it with your friends.

User reviews

4.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

niceeee line minilyrics dekstop

Virtual acc·3 Sept 2026

i cant even open extension...is update going on? i tried to reinstall but didnt work out

pratik·21 Aug 2026

stars aren't enough, perfect👌👌👌

Max Maina·20 Aug 2026

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

54 indicators in this extension

54 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

Version	Size	Verdict	Findings	Permhash
1.6.14 Latest	0.46 MB	Not scanned	—	4ed09905faec9095dcbdb678d6e31001d1e1c7a0b4797a375d3fc37fbbb03d9f
1.6.13	0.46 MB	Not scanned	—	4ed09905faec9095dcbdb678d6e31001d1e1c7a0b4797a375d3fc37fbbb03d9f
1.6.12	0.46 MB	Not scanned	—	4ed09905faec9095dcbdb678d6e31001d1e1c7a0b4797a375d3fc37fbbb03d9f
1.6.9	0.46 MB	Not scanned	—	4ed09905faec9095dcbdb678d6e31001d1e1c7a0b4797a375d3fc37fbbb03d9f
1.5.19	0.44 MB	Not scanned	—	3ae3547430004af8c9dd26178a2675ceca25a857c026faf819680a1ecf4b8ecb
1.5.18	0.44 MB	Not scanned	—	3ae3547430004af8c9dd26178a2675ceca25a857c026faf819680a1ecf4b8ecb
1.5.17	0.44 MB	Not scanned	—	3ae3547430004af8c9dd26178a2675ceca25a857c026faf819680a1ecf4b8ecb
1.5.16	0.44 MB	Not scanned	—	3ae3547430004af8c9dd26178a2675ceca25a857c026faf819680a1ecf4b8ecb
1.5.13	0.44 MB	Not scanned	—	3ae3547430004af8c9dd26178a2675ceca25a857c026faf819680a1ecf4b8ecb
1.5.11	0.43 MB	Not scanned	—	3ae3547430004af8c9dd26178a2675ceca25a857c026faf819680a1ecf4b8ecb

Showing 1 to 10 of 20 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Entertainment

Microsoft Edge Flash Player23,479,120 users
Netflix Party is now Teleparty10,000,000 users
Netflix Party is now Teleparty2,359,777 users
Microsoft Multimedia Redirection1,232,737 users
AHA Music - Song Finder for Browser1,000,000 users

Not reviewed

54 indicators in this extension

What our analysis found