Chrome Web Store
95Versions
1Code reviewed

No malware found

In code review (v5.5.6237)

Our reviewer read version 5.5.6237 โ€” the most recent version we have reviewed โ€” and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Tampermonkey BETA, used by 700,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites, can inject scripts into pages and can observe network requests. It comes from a trusted publisher and was last updated in October 2026.

The extension is the legitimate Tampermonkey BETA userscript manager. Broad permissions (tabs, webRequest, scripting, all_urls) are necessary for its core functionality of injecting and managing userscripts. The included analytics (Matomo) send data to, a first-party domain covered by the published privacy policy and disclosed data collection (User activity, Location). All network operations go through the extension's own message routing; no unauthorized exfiltration to third parties was found. The content script's is standard for userscript managers, not malicious. ML model risk score 0.00, trusted publisher badge, and high user rating corroborate the benign verdict.

Tampermonkey BETA

Tampermonkey BETA

ID: gcalenpjmijncebpfijmoaglllgpjagf

Supported Languages

๐Ÿ‡ธ๐Ÿ‡ฆArabic
๐Ÿ‡ง๐Ÿ‡ทBrazilian Portuguese
๐Ÿ‡จ๐Ÿ‡ณChinese (Simplified)
๐Ÿ‡น๐Ÿ‡ผChinese (Traditional)
๐Ÿ‡ญ๐Ÿ‡ทCroatian
๐Ÿ‡จ๐Ÿ‡ฟCzech
๐Ÿ‡ฉ๐Ÿ‡ฐDanish
๐Ÿ‡ณ๐Ÿ‡ฑDutch
๐Ÿ‡บ๐Ÿ‡ธEnglish
๐Ÿ‡ซ๐Ÿ‡ทFrench
๐Ÿ‡ฉ๐Ÿ‡ชGerman
๐Ÿ‡ฌ๐Ÿ‡ทGreek
๐Ÿ‡ฎ๐Ÿ‡ฑHebrew
๐Ÿ‡ฎ๐Ÿ‡ณHindi
๐Ÿ‡ญ๐Ÿ‡บHungarian
๐Ÿ‡ฎ๐Ÿ‡ฉIndonesian
๐Ÿ‡ฎ๐Ÿ‡นItalian
๐Ÿ‡ฏ๐Ÿ‡ตJapanese
๐Ÿ‡ฐ๐Ÿ‡ทKorean
๐Ÿ‡ณ๐Ÿ‡ดNorwegian
๐Ÿ‡ต๐Ÿ‡ฑPolish
๐Ÿ‡ต๐Ÿ‡นPortuguese
๐Ÿ‡ท๐Ÿ‡บRussian
๐Ÿ‡ท๐Ÿ‡ธSerbian
๐Ÿ‡ธ๐Ÿ‡ฐSlovak
๐Ÿ‡ช๐Ÿ‡ธSpanish
๐Ÿ‡น๐Ÿ‡ทTurkish
๐Ÿ‡บ๐Ÿ‡ฆUkrainian
๐Ÿ‡ป๐Ÿ‡ณVietnamese

Extension Info & Metadata

Status
Active
Version
5.6.6242
Size
1.74 MB
Rating
4.0/5
Reviews
4,551
Users
700,000
Type
Extension
Updated
Oct 1, 2026
Category
Productivity Developer
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
2extensions
All still listed
Scanned by Extension Auditor โ€” Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
http://tampermonkey.net/View Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Extensions
2
Active
2
Obsolete
0
Listed
2
Unlisted
0
Users
12,700,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
webRequestBlocking
Permission
Critical
This permission allows the extension to intercept, modify, or block any web request in real-time before it reaches its destination. Rated Critical because it can modify sensitive data (like passwords, credit cards) before encryption, redirect traffic to malicious sites, or block security updates.
declarativeNetRequestWithHostAccess
Permission
Critical
This permission combines network request modification with host permissions. Rated Critical because it can modify requests for specific domains, potentially targeting sensitive websites with precise attack rules.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
userScripts
Permission
Critical
This permission allows registration of arbitrary user scripts that run in a page's main world. Rated Critical because the scripts execute with full access to page JavaScript, can be updated at runtime from remote code, and bypass the isolated world that normally contains content scripts.
<all_urls>
Host
Critical
Broad host access โ€” the extension can read/modify content on every website.
Dangerous Permission Combination
Risk Factor
Critical
This extension can intercept, modify, and block web requests in real-time.
webNavigation
Permission
High
This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
clipboardWrite
Permission
High
This permission allows modification of clipboard content. Rated High because it can inject malicious content into the clipboard, modify copied passwords, and manipulate copied data.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
Dangerous Permission Combination: scripting,cookies,webRequest
Risk Factor
High
Affects data integrity and user control
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
idle
Permission
Low
This permission detects system idle state. Rated Low because it only observes user activity state without access to activity details.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
chrome://favicon/
Permission
Unknown
No classification available for this permission.
publicSuffix
Permission
Unknown
No classification available for this permission.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Change the web at will with userscripts

Read the publisherโ€™s full description

Enhance your browsing experience with Tampermonkey BETA! ๐ŸŒ๐Ÿš€ Important: this is the BETA Version ๐ŸŒŸ of Tampermonkey! You can find the stable version here: ๐Ÿ”— https://chrome.google.com/extensions/detail/dhdgffkkebhmkfjojejmpbldmpobfkfo Please note: Tampermonkey BETA may contain bugs, so use with caution ๐Ÿ˜‰ ### ๐Ÿ”‘ Key Features: ### - Easily manage and edit all your userscripts - Enable and disable your scripts with just 2 clicks - Conveniently backup and restore via zip file or cloud storage (Google Drive, Dropbox, OneDrive, WebDAV) - Compatible with Greasemonkey up to version 3.x and includes experimental 4.0 support ### ๐Ÿž Bugs ### Instead of leaving a negative rating, kindly report bugs here: - http://tampermonkey.net/bug - https://github.com/Tampermonkey/tampermonkey/issues ### ๐Ÿ“ Change Log ### http://tampermonkey.net/changelog.php?ext=gcal ### โ“ FAQ ### http://tampermonkey.net/faq.php ### ๐Ÿ” Data Usage & Privacy: ### Tampermonkey collects anonymous usage information to improve your experience, such as: ๐Ÿ“ฆ Extension version ๐ŸŒ Preferred language ๐Ÿšซ Script installations for blacklist updates ๐Ÿ–ฅ๏ธ Browser and operating system type Additionally, error reports containing anonymous information are automatically sent when internal errors occur. You can disable this feature by adjusting the "Anonymous statistics" setting in the extension. โš™๏ธ Note: In incognito mode, no usage information is collected or sent. ๐Ÿ•ต๏ธโ€โ™‚๏ธ For specific functions (e.g., blacklist updates), data from the browser's user-agent string may be collected. You can disable this by adjusting the "Userscript Blacklist Source" and "Show update notification" settings. ### ๐Ÿ“ Location Data: ### If either the "Userscript Blacklist Source" or "Show update notification" setting is enabled, Tampermonkey sends HTTP requests, which inherently include your IP address. Server logs only contain truncated IP addresses. If "Anonymous statistics" is enabled, your IP address helps determine your approximate region or country. ๐ŸŒ Thank you for using Tampermonkey! ๐Ÿ˜ƒ

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Showing 1 to 10 of 100 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from http://tampermonkey.net/

Popular in productivity/developer