Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: TikTok ™ for Desktop

CRITICAL RISKRemoved from Chrome Web Store

TikTok ™ for Desktop

ID: njkcpdaddgmicpgppdidfhfgnjcnlinb

Could be malicious

Supported Languages

🇧🇷Brazilian Portuguese

🇪🇸Catalan

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇫🇷French

🇩🇪German

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇹Lithuanian

🇳🇴Norwegian

🇵🇹Portuguese

🇪🇸Spanish

🇸🇪Swedish

🇹🇭Thai

🇹🇷Turkish

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.1.7

Size

9.56 MB

Rating

4.2/5

Reviews

798

Users

30,000

Type

Extension

Updated

Jun 4, 2025

Publisher Contextual Analysis

Author: software.dev.labsView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

30,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Enjoy TikTok™ on your PC: Chrome Extension for creative and exciting content on your desktop

Discover TikTok™ like never before with our innovative Chrome extension! TikTok™ for desktop brings the magic of this viral video platform directly to your screen. 🌟 🚀 Explore and Download: Navigate an endless stream of creative and exciting content on TikTok™. And that's not all! Download your favorite videos and watch them offline whenever you want. 💻 Mobile Experience on your Desktop: Do you miss using TikTok on your mobile? No more! Our extension emulates the mobile experience so you can enjoy all its features directly on your desktop. 🎶 Library of Incredible Sounds: Boost your creativity with millions of musical tracks and fresh sounds. With regular updates in all genres, you'll never run out of options for your creations! 🌍 Build your Community: Join a global community of TikTok™ creators and enthusiasts. Explore exciting videos, follow your favorite creators and share your standout moments with the world. Note: This extension is not official from TikTok, it was created by independent programmers.

User Growth

Showing data from May 21, 2024 to May 20, 2025

Versions

-25%(-10,000 users)

Compared to 3 months ago

16 versions released in this period

Rating Count

Total: 792 ratings

Average Rating

Current: 4.24 / 5.0+4.24

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium4

Low1

Versions scanned

Showing 1 of 18 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.8 Code review	8

Extension Version	Code Review Findings
1.0.8	8

Files with findings

6 distinct paths — top paths by unique finding count:

pages/background/background.js2
pages/hidenOpen.js2
js/alertaviso.js1
pages/profile.js1
pages/reload.js1
rules.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	pages/background/background.js (line 611)	The service worker uses chrome.scripting.executeScript to write attacker-controlled data ('itemsTrend', and elsewhere 'tklinks') directly into the tiktok.com origin's localStorage. This bridges privileged extension st…	1.0.8
2	Phishing	high	pages/reload.js (line 13568)	On any visit to tiktok.com/profile?*, the content script pulls a list of URLs (tklinks) out of page localStorage, picks one at random, and force-navigates the tab there with location.assign(). Because the URL list is …	1.0.8
3	Privilege Escalation	high	pages/hidenOpen.js (line 91)	This script silently invokes .click() on TikTok's 'ButtonRefuseOrLogin' button after making it transparent (opacity:0), simulating a user choice without their consent. Programmatically firing UI consent buttons that t…	1.0.8
4	Network Interception	medium	rules.json (line 2)	The extension uses declarativeNetRequest to spoof the User-Agent on every tiktok.com main_frame/sub_frame request to an Android mobile UA. While this enables the desktop-rendering use case the extension advertises, it…	1.0.8
5	Network Interception	medium	pages/background/background.js (line 933)	The service worker registers a chrome.webRequest.onErrorOccurred listener filtering on '<all_urls>', which would observe network failures across every site the user visits. The manifest does NOT declare the 'webReques…	1.0.8
6	Other	medium	pages/hidenOpen.js (line 10)	A MutationObserver watches every DOM mutation on tiktok.com and hides any modal that carries TikTok's CTA confirm buttons. Suppressing first-party prompts (login walls, install prompts, safety dialogs) without disclos…	1.0.8
7	Other	medium	js/alertaviso.js (line 1)	After 10 minutes on tiktok.com, the content script overlays a non-dismissible (allowOutsideClick:false) SweetAlert with a confirm button literally labeled '⭐⭐⭐⭐ OK' and, on confirmation, opens the extension's Chrome W…	1.0.8
8	Other	low	pages/profile.js (line 1)	Polled twice per second on TikTok profile pages, this hides any matrix-smart-wrapper element whose text contains 'TikTok' (these are TikTok's own install/upsell promos and 'open in app' guides). Continuous suppression…	1.0.8

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


tailwindcss.com	/n///n1.	https://tailwindcss.com\n//\n1.
github.com	/mozdevs/cssremedy/issues/4	https://github.com/mozdevs/cssremedy/issues/4
github.com	/tailwindcss/tailwindcss/pull/116	https://github.com/tailwindcss/tailwindcss/pull/116
bugzilla.mozilla.org	/show_bug.cgi	https://bugzilla.mozilla.org/show_bug.cgi?id=190655
bugs.chromium.org	/p/chromium/issues/detail	https://bugs.chromium.org/p/chromium/issues/detail?id=999088,
bugs.webkit.org	/show_bug.cgi	https://bugs.webkit.org/show_bug.cgi?id=201297
bugs.chromium.org	/p/chromium/issues/detail	https://bugs.chromium.org/p/chromium/issues/detail?id=935729,
bugs.webkit.org	/show_bug.cgi	https://bugs.webkit.org/show_bug.cgi?id=195016
github.com	/mozilla/gecko-dev/blob/2f9eacd9d3d995c937b4251a5557d95d494c9be1/layout/style/res/forms.css	https://github.com/mozilla/gecko-dev/blob/2f9eacd9d3d995c937b4251a5557d95d494c9be1/layout/style/res/forms.css#L728-L737
github.com	/tailwindlabs/tailwindcss/issues/3300	https://github.com/tailwindlabs/tailwindcss/issues/3300

Showing 1 to 10 of 80 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


104.0.0.0	IPv4	-
132.0.0.0	IPv4	-

2.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

het laden en zoeken naar video duurt veel de lang

benjamin Torfs·17 Jun 2025

ko sử dụng được.

minh tomypham·17 Jun 2025

영상을 찾고있습니다만 몇분?

클

클립쟁이하얀마스크·8 Jun 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

TikTok ™ for Desktop

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 18 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating