Chrome Web Store
10Versions
1Code reviewed

Do not install

Code review: critical (v1.0.5)

Our reviewer read version 1.0.5 of this extension and confirmed malicious behaviour. 3 security findings documented below. Do not install it. Remove it if you already have it.

22 indicators in this extension

22 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Translator, used by 60,000 people, is rated malicious by Extension Auditor. Our code review reported 3 findings (1 critical, 2 high), led by unauthorized data collection. It comes from a trusted publisher and was last updated in July 2026.

Key findings

  • Critical

    Unauthorized Data Collection

    The DecoderSettings class in contains an initTabsSettings method that sends encoded user data (extension ID, version, UID, timestamp) to a remote server and browser tabs based on the server's response. This is undisclosed injection functionality, unrelated to the stated translation purpose. The collected data is not disclosed in the Chrome Web Store listing.

  • High

    Other

    The bundled manifest declares manifest_version 2 and requests broad permissions including <all_urls>, webRequest, and webRequestBlocking. The published Chrome Web Store listing shows manifest_version 3 with only contextMenus, storage, and host_permissions limited to [domain withheld]. This discrepancy indicates the extension hides its true capabilities from the store review.

  • High

    Network Interception

    The DecoderSettings class fetches remote configuration and installs a blocking webRequest listener that can intercept and modify requests based on dynamic server instructions. Although the default settings target [domain withheld], the actual behavior is remotely configurable, enabling unauthorized network interception and potential traffic manipulation.

Analyst notes

The extension contains hidden adware functionality (, DecoderSettings class) that contacts first-party servers to receive instructions to open and close browser tabs and potentially intercept web requests. This behavior is not disclosed in the description or privacy policy. Additionally, the bundled manifest differs significantly from the published listing, including undeclared permissions like webRequest and webRequestBlocking.

Translator

Translator Chrome extension security report

ID: pnpdnibdembnnlaiibkeandepjajegoi

Extension Info & Metadata

Status
Active
Version
3.0.0
Size
0.67 MB
Rating
4.1/5
Reviews
44
Users
60,000
Type
Extension
Updated
Jul 6, 2026
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Trusted
Author
poqdev.com
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
60,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6
Screenshot 7
Screenshot 8
Screenshot 9

Install growth

Item
Type
Severity
Description
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
*://translate.googleapis.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: *://translate.googleapis.com/*
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

22 indicators in this extension

22 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Translate words and phrases while browsing the web, using Google translator.

Read the publisher’s full description

✨🌐 The Extension That Transforms Your Language Experience 🌐✨ 🚀Introducing our quick and efficient translation plugin to help you navigate the world wide web without any language barriers! By prioritizing user convenience and reading experience, we've created a feature-rich extension that is bound to make browsing a breeze. 🌟 Amazing Features Include: 1️⃣ 🔁 Automatic Language Translation: Set your preferred language in the extension settings, and watch as everything gets translated instantly. The smart translator even detects the language of the website you're visiting! 2️⃣ 🔊 Listen to Translations: Hear the correct pronunciation of translated words and phrases in a new tab, making language learning even more fun. 3️⃣ 📌 Highlight & Right-Click: Simply highlight or right-click any text you want to translate, hit the translate icon, and voilà – the translation will appear in a new tab. 4️⃣ 🎯 Google Translate API: Enjoy the accuracy and reliability of Google's translation technology for all your language blunders and necessities. 5️⃣ 👌 User-Friendly Pop-Up: Your reading experience won't be hindered or blocked, thanks to our sleek pop-up display bar that keeps everything smooth and seamless. 6️⃣ 📈 Informative Display: Our clear and transparent display column presents all essential translation information, ensuring the user's focus remains on the content and not the display box. 7️⃣ 🔍 Customization: Tailor your translation results to your preferences. Pick and choose which elements should appear in your translation results – common meanings, detailed descriptions, sample sentences, or all of the above. 💡 So, what will it be – a friend or a foreign language dictionary? Enjoy easy access to Google's renowned translation services with our handy browser extension. Make the internet your linguistic playground and never again worry about language barriers! 📢 Updates: No more hidden style problems, upgraded to Manifest v3, and squashed small bugs.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
10

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

22 indicators in this extension

22 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
2.0.27
Latest
0.66 MBNot scanned—
4605947b9841a51ca35b9967e41c42856c5baa4cac237e7e7834ea58c160aab1
2.0.25
0.62 MBNot scanned—
4605947b9841a51ca35b9967e41c42856c5baa4cac237e7e7834ea58c160aab1
2.0.24
0.57 MBNot scanned—
4605947b9841a51ca35b9967e41c42856c5baa4cac237e7e7834ea58c160aab1
2.0.23
0.57 MBNot scanned—
4605947b9841a51ca35b9967e41c42856c5baa4cac237e7e7834ea58c160aab1
1.0.9
0.57 MBNot scanned—
0f744f5cd12454266870264474afb1136d5a49b57e8c6807923b58fa6e3b81cb
1.0.7
0.58 MBNot scanned—
0f744f5cd12454266870264474afb1136d5a49b57e8c6807923b58fa6e3b81cb
1.0.5
0.58 MBMalicious0
0f744f5cd12454266870264474afb1136d5a49b57e8c6807923b58fa6e3b81cb
1.0.1
0.57 MBNot scanned—
0f744f5cd12454266870264474afb1136d5a49b57e8c6807923b58fa6e3b81cb
1.0.0
0.57 MBNot scanned—
0f744f5cd12454266870264474afb1136d5a49b57e8c6807923b58fa6e3b81cb
3.0.0
0.67 MBNot scanned—
4605947b9841a51ca35b9967e41c42856c5baa4cac237e7e7834ea58c160aab1
Showing 1 to 10 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Store rankings

Where this extension appears in store category, collection and keyword rankings.