Chrome Web Store

12Versions

0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

48 indicators in this extension

48 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

What our analysis found

Song Lyrics, used by 4,000 people, is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in June 2024.

Song Lyrics Chrome extension security report

ID: fnfipngolkdmolfocahlgjoipplhbmha

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Active

Version

5.1

Size

0.14 MB

Rating

4.5/5

Reviews

Users

4,000

Type

Extension

Updated

Jun 26, 2024

Publisher Contextual Analysis

Trusted

Author: AlexWayfer
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

4,082

Screenshots & videos

Install growth

User Growth

Showing data from Sep 10, 2023 to Sep 08, 2024

Versions

No change in user count

Compared to 3 months ago

10 versions released in this period

Rating Count

Total: 14 ratings+2 (17%)

Average Rating

Current: 4.64 / 5.0+4.64

See plans

React Flow

Internal permhash`7397ff4914…`
No malicious matches

No other extension carries this fingerprint.

Permhash (Mandiant)`9cd02b6680…`
Too common to be evidence

335 other extensions carry this fingerprint, 5 of them known malicious. A permission set this common is not evidence on its own; the most installed members are listed for reference.

Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldnot flagged
Withheldnot flagged
+328 more

Network indicators

37 URLs and 0 IP literals were extracted from this version.

Item	Type	Severity	Description
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
activeTab	Permission	Medium	This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://.genius.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://.rapgenius.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://s3.amazonaws.com/rapgenius/*	Host	Medium	Host permission — access limited to this URL pattern.
Access to Sensitive Domains	Risk Factor	Medium	This extension requests access to sensitive domains: https://s3.amazonaws.com/rapgenius/*
contextMenus	Permission	Low	This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

Sensitive Domain Access

This extension has access to the following sensitive domains:

https://s3.amazonaws.com/rapgenius/*

48 indicators in this extension

48 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

About this extension

Display current song lyrics for music platforms, such as Spotify, Apple Music, Deezer, YouTube, etc.

Read the publisher’s full description

Chrome Extension for displaying current song lyrics. It supports a lot of music platforms, such as Spotify, Apple Music, Deezer, YouTube (with chapters), SoundCloud, etc. You can check all platforms and other information on GitHub: https://github.com/AlexWayfer/song-lyrics?tab=readme-ov-file#song-lyrics Right now it loads lyrics from Genius, other sources can be added in the future. It also has options for displaying. Changelog: v5.1 (2024-06-26) * Watch for parsed search query change. You can resume watching by pressing "Refresh" button. Works with "Remove (Mix)" checkbox correctly. * Don't display "Remove (Mix)" checkbox when useless. * Pin correctly with a custom search query. * Fix parsing for YouTube. * Fix parsing for Shazam. * Fix border and background colors opacity for iframe popup. * Add "Clear iframe settings" context menu. When you've messed up with its position or size. * Increase lyrics cache TTL from 24 hours to 7 days. v5.0 (2024-06-20) * Return regular popup, but add a pin button to display it as iframe. Now you will always open the default popup window, but you can switch to iframe anytime. * Add refresh button for re-parsing song title and artists from a site. * Remake iframe moving actions, adopt it for zoomed pages. * Remake CSS standard resize to a custom corner. * Fix song art sizes. * Allow song arts from AWS S3 (`/rapgenius`). v4.0 (2024-06-05) * Make popup window as iframe. Resizable and movable. Position and size are saving per site. * Pass colors from popup iframe even when site is unsupported. * Add music platforms for popup iframe on non-supported sites. * Add query form for unsupported sites. * Add an error notice when site doesn't work as expected. With a link to contact the developer. * Remove trash in square parentheses from YouTube requests. The whole changelog: https://github.com/AlexWayfer/song-lyrics/blob/main/CHANGELOG.md Icon: https://www.flaticon.com/free-icon/song-lyrics_6887372

User reviews

3.9 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Reconheceu errado a letra de um vídeo tocando no youtube.

Max Morais Dos Santos (Max Morais Mobile)·28 Jun 2026

does what it says. if lyrics dont show up just keep thge search term in the extension popup simplified with just the artist and song name, without all the extra text that most youtube vids come titled with. and then pin it, done! certainly Genius! badumtss 11/10 really hope chrome doesnt get rid of this..

•ᓚ

• ᓚᘏᗢ •·10 Oct 2025

Funciona bien, pero ¿podrías agregar el botón de traducción que hay en la página?

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

48 indicators in this extension

48 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

Version	Size	Verdict	Findings	Permhash
5.0 Latest	0.14 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
4.0.2	0.14 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
4.0.1	0.14 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
3.1.0	0.14 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
2.0	0.14 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
1.9	0.13 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
1.8	0.13 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
1.7	0.13 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
1.6	0.12 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
1.4	0.12 MB	Not scanned	—	2b1e78ea935f5a876ba08e38c3dd3238db38dc1a6119179a34a733747daf953f

Showing 1 to 10 of 20 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Entertainment

Microsoft Edge Flash Player23,479,120 users
Netflix Party is now Teleparty10,000,000 users
Netflix Party is now Teleparty2,359,777 users
Microsoft Multimedia Redirection1,232,737 users
AHA Music - Song Finder for Browser1,000,000 users

Not reviewed

48 indicators in this extension

What our analysis found

Song Lyrics Chrome extension security report

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Screenshots & videos

Install growth

User Growth

Rating Count

Average Rating

Threat relationships

Internal permhash7397ff4914…No malicious matches

Permhash (Mandiant)9cd02b6680…Too common to be evidence

Network indicators

Security analysis

Manifest File Security Analysis

Sensitive Domain Access

48 indicators in this extension

Store listing & files

About this extension

User reviews

User Reviews

Extension files

Network indicators

URLs

48 indicators in this extension

Versions & changes

Version History

Code Diff

Related extensions

More from AlexWayfer

Popular in Entertainment

User Growth

Rating Count

Average Rating

User Reviews

Threat relationships

Internal permhash7397ff4914…No malicious matches

Permhash (Mandiant)9cd02b6680…Too common to be evidence

Network indicators

Internal permhash`7397ff4914…`
No malicious matches

Permhash (Mandiant)`9cd02b6680…`
Too common to be evidence

Internal permhash`7397ff4914…`
No malicious matches

Permhash (Mandiant)`9cd02b6680…`
Too common to be evidence