No malware found
In code review (v5.5.0)
Our reviewer read version 5.5.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
What our analysis found
Tampermonkey, used by 12,000,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in October 2026.
This is Tampermonkey, a well-known legitimate userscript manager with 12 million users and a Google trusted publisher badge. The ML risk score is 0.00 (the model correctly rates it low-risk); the Critical rating comes solely from the permission-based risk engine. Every broad permission — `<all_urls>`, `webRequest`, `scripting`, `userScripts` — is intrinsically required for a userscript manager's core purpose and aligns with the CWS description. Code review confirms: is a userscript API sandbox (unsafeWindow isolation, a security feature), implements GM_xmlhttpRequest for cross-origin userscript requests plus Matomo analytics exclusively to ` (publisher's own subdomain, covered by CWS-disclosed 'User activity' collection), is a service worker that caches favicons, and is an ESLint plugin for userscript metadata linting. The bundled manifest matches the published manifest exactly. The 31-extension permhash cluster has a 0% malware rate, corroborating the benign verdict.
Tampermonkey
ID: dhdgffkkebhmkfjojejmpbldmpobfkfo
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- http://tampermonkey.net/View Profile
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
No Security Analysis Available
Security analysis has not been performed for this extension version yet.
Gain full insight into all external connections.
Upgrade for full visibility.
About this extension
Change the web at will with userscripts
Read the publisher’s full description
Enhance your browsing experience with Tampermonkey! 🌐🚀 Tampermonkey is a versatile browser extension with over 🔟 million users that enhances your browsing experience by allowing you to run userscripts on websites. Userscripts are small programs that modify page layouts, add or remove features, and automate actions to personalize your web experience. ### 🔑 Key Features: ### 🛠️ Efficiently manage and edit your userscripts ⚡ Swiftly activate and deactivate scripts with just two clicks 🔗 Synchronize scripts using Chrome Sync and various cloud storage services (Google Drive, Dropbox, OneDrive, Yandex.Disk, and WebDAV) 💾 Backup and restore options and userscripts through zip files and/or cloud storage 🔄 Automatic script updates for a seamless experience For a comprehensive overview, check out our frequently asked questions or simply install the extension. 💡 ### 🔍 Discover Userscripts: ### Find a wide array of userscripts at www.userscript.zone. 🌟 ### 📌 Useful Links: ### 🐛 Bug Reports: http://tmnk.net/bug 📝 Full Changelog: http://tmnk.net/changelog.php?ext=dhdg ❓ Frequently Asked Questions: http://tmnk.net/faq 🔎 Userscript Search: https://www.userscript.zone ### 🔐 Data Usage & Privacy: ### Tampermonkey collects anonymous usage information to improve your experience, such as: 📦 Extension version 🌍 Preferred language 🚫 Script installations for blacklist updates 🖥️ Browser and operating system type Additionally, error reports containing anonymous information are automatically sent when internal errors occur. You can disable this feature by adjusting the "Anonymous statistics" setting in the extension. ⚙️ Note: In incognito mode, no usage information is collected or sent. 🕵️♂️ For specific functions (e.g., blacklist updates), data from the browser's user-agent string may be collected. You can disable this by adjusting the "Userscript Blacklist Source" and "Show update notification" settings. ### 📍 Location Data: ### If either the "Userscript Blacklist Source" or "Show update notification" setting is enabled, Tampermonkey sends HTTP requests, which inherently include your IP address. Server logs only contain truncated IP addresses. If "Anonymous statistics" is enabled, your IP address helps determine your approximate region or country. 🌏 Thank you for using Tampermonkey! 😃
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
No network indicators were extracted from this version.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from http://tampermonkey.net/
- Tampermonkey BETA700,000 users
Popular in productivity/workflow
- AdBlock — block ads across the web64,000,000 users
- Adblock Plus - free ad blocker40,000,000 users
- ClassLink OneClick Extension14,000,000 users
- Clever13,000,000 users
- Screencastify - Screen Video Recorder9,000,000 users