What our analysis found

touchenex 확장, used by 8,000,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in September 2026.

The extension acts as a bridge between web pages and a native security application by RaonSecure. It requires broad permissions and native messaging for its claimed security features (keylog protection, firewall, antivirus, etc.). No code exfiltrates data to external servers, no obfuscation or covert activity is present, and all communication is local. The ML model likely overfitted on permission usage and content script injection patterns that are necessary for this type of security extension.