Chrome Web Store

64Versions

1Code reviewed

No malware found

In code review (v26.146.2.45)

Our reviewer read version 26.146.2.45 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Tag Assistant Companion, used by 500,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in September 2026.

The extension is a legitimate Google tool for debugging Google Tag Manager and. All network requests and data flows are directed to Google-owned domains (,, etc.) which match the publisher's website and privacy policy. The disclosed data collection categories (PII, user activity) align with the extension’s purpose of analyzing page tags. Permissions like scripting, host access, and management are required for the core debugging functionality. The ML model’s low risk score (0.00) and the absence of any malicious code patterns confirm the initial alert is a false positive.

Tag Assistant Companion

ID: jmekfmbnaedfebfnmakmokmlfpblbfdm

Supported Languages

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇻🇳Vietnamese

Extension Info & Metadata

Status

Active

Version

26.267.11.35

Size

0.22 MB

Rating

3.1/5

Reviews

206

Users

500,000

Type

Extension

Updated

Sep 24, 2026

Publisher Contextual Analysis

Trusted

Author: GoogleView Profile
Privacy: Privacy Policy
Help: Help Center
Country: IE
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: Gordon House Barrow Street Dublin 4 D04 E5W5 IE
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

4,344,728

Screenshots & videos

Install growth

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

-16.67%(-100,000 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 26 ratings

Average Rating

Current: 2.54 / 5.0+0.38

See plans

React Flow

Internal permhash`237cac0d98…`
No malicious matches

No other extension carries this fingerprint.

Permhash (Mandiant)`3f49fc1764…`
No malicious matches

No other extension carries this fingerprint.

Network indicators

27 URLs and 0 IP literals were extracted from this version.

Item	Type	Severity	Description
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>	Host	Critical	Broad host access — the extension can read/modify content on every website.
webNavigation	Permission	High	This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions	Risk Factor	High	This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access	Risk Factor	High	This extension can inject scripts into any website.
management	Permission	Medium	This permission manages other installed extensions. Rated Medium because it can enable/disable other extensions and modify their settings, with changes being visible to users.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Access to Sensitive Domains	Risk Factor	Medium	This extension requests access to sensitive domains: https://.google.com/embed/tagging/info/sidepanel, https://*.google.com/guided_flows/open
Early Content Script Execution	Risk Factor	Medium	This extension runs content scripts at document_start.
sidePanel	Permission	Low	This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.

Sensitive Domain Access

This extension has access to the following sensitive domains:

https://*.google.com/embed/tagging/info/sidepanel*
https://*.google.com/guided_flows/open

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

The Tag Assistant Companion extension works with Tag Assistant to help troubleshoot installation of gtag.js and Google Tag Manager.

Read the publisher’s full description

We’re grateful for your feedback—we've listened and are moving the functionality of Tag Assistant Companion into the original Tag Assistant extension and are retiring this extension. The original Tag Assistant extension now supports features from both the original and companion extensions, including in-page debugging and advanced functionality on tagassistant.google.com. Please install the Tag Assistant extension. If you have both the original and companion extensions installed, the companion extension will be automatically uninstalled in the coming months.

User reviews

3.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Napakalinis ng pagkakasulat, Jeffrey Olivar Alda concise, informative, at may civic clarity. Kung nais mong isama ito sa ALDANET documentation or ASF calibration rollout notes, maaari nating i-format ito bilang isang **migration bulletin** o **extension deprecation advisory**. Narito ang mungkahi ko para sa mas pormal na changelog entry: --- ## 🔄 Extension Migration Notice – Tag Assistant Companion **Date Issued:** 2025-09-24 **System Impact:** Browser-based debugging tools for GTM/gtag.js **Affected Component:** Tag Assistant Companion Chrome Extension **Status:** Scheduled for deprecation ### 🔧 Summary Google has consolidated the functionality of the *Tag Assistant Companion* into the main *Tag Assistant* extension. This change streamlines debugging workflows and centralizes support for `gtag.js` and Google Tag Manager. ### 🆕 New Capabilities in Tag Assistant: - Seamless in-page debugging for GTM and gtag.js - Integrated support for [tagassistant.google.com](https://tagassistant.google.com) - Unified extension interface for simplified troubleshooting ### 📌 Required Action - Ensure the **Tag Assistant extension** is installed. - If both extensions are present, the Companion extension will be **automatically removed** in upcoming updates. ### 🔍 Notes for ALDANET Integration - Update browser compatibility documentation to reflect the new extension baseline. - Remove references to Tag Assistant Companion in field logging guides and ASF calibration toolkits. - Validate GTM/gtag.js diagnostics using the unified extension prior to deployment. --- Kung gusto mong i-embed ito sa jeffreyolivaralda.org or ALDANET’s schema documentation, I can help format it for Markdown, HTML, or even a dashboard snippet. Would you like to include a versioning tag or rollout timeline for ASF field teams?

Jeffrey Alda·24 Sept 2025

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version	Size	Verdict	Findings	Permhash
26.267.11.35 Latest	0.22 MB	Not scanned	—	3f49fc17644020ff192686499f5cb6e34396217160d0310805dae0dbb3902b32
26.260.13.39	0.22 MB	Not scanned	—	3f49fc17644020ff192686499f5cb6e34396217160d0310805dae0dbb3902b32
26.244.2.46	0.22 MB	Not scanned	—	3f49fc17644020ff192686499f5cb6e34396217160d0310805dae0dbb3902b32
26.202.2.46	0.22 MB	Not scanned	—	82027771a48b03c8e824296c2fb61bc0df71d15a40e049858f5821c19c5c683d
26.216.2.45	0.22 MB	Not scanned	—	3f49fc17644020ff192686499f5cb6e34396217160d0310805dae0dbb3902b32
26.167.2.46	0.22 MB	Not scanned	—	3f49fc17644020ff192686499f5cb6e34396217160d0310805dae0dbb3902b32
26.146.2.45	0.22 MB	No malware found	0	3f49fc17644020ff192686499f5cb6e34396217160d0310805dae0dbb3902b32
26.125.13.59	0.22 MB	Not scanned	—	3f49fc17644020ff192686499f5cb6e34396217160d0310805dae0dbb3902b32
26.111.2.45	0.22 MB	Not scanned	—	3f49fc17644020ff192686499f5cb6e34396217160d0310805dae0dbb3902b32
26.97.2.45	0.22 MB	Not scanned	—	3f49fc17644020ff192686499f5cb6e34396217160d0310805dae0dbb3902b32

Showing 1 to 10 of 70 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Developer Tools

touchenex 확장8,000,000 users
SentinelOne7,000,000 users
TrendAI™ Toolbar for Enterprise7,000,000 users
React Developer Tools6,000,000 users
ColorZilla4,000,000 users

No malware found

What our analysis found