No malware found
In code review (v2.1.0)
Our reviewer read version 2.1.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
44 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Truffle, used by 100,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in May 2024.
Key findings
- High
Other
The published CWS manifest lists host_permissions as [domain withheld] and [domain withheld], plus additional permissions (unlimitedStorage, gcm, notifications, declarativeNetRequestWithHostAccess) not present in this bundled version. This discrepancy could mean the live extension has much broader capabilities, posing a risk of unauthorized data access or abuse. Users should verify the installed version matches expectations.
Analyst notes
Code analysis shows benign functionality: enhancing livestreams with emotes, badges, theatre mode, etc. Network requests go to publisher-controlled domains ([domain withheld], zygote.spore.build) and align with disclosed data collection categories (authentication info, PII). However, the published CWS manifest differs significantly from the bundled manifest (adds broad host permissions to all URLs, plus gcm, notifications, declarativeNetRequest). This mismatch could indicate a later, more invasive update, lowering confidence.
Truffle Chrome extension security report
ID: bkkjeefjfjcfdfifddmkdmcpmaakmelp
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Spore Labs, Inc.
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
44 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Enhance your livestream viewing experience
Read the publisher’s full description
Enhance your viewing experience on YouTube Live and Twitch! This extension adds familiar emotes to live chat, allows you to set your username and name color in chat, participate in predictions, cheer on other creators with raids, unlock rewards in the battle pass, and helps you find livestreams more easily. How to use: • Install and visit an enabled livestream to begin using the extension. • Chat settings can be configured in the settings menu by clicking on the extension icon in the YouTube header. • Name color and display name can be configured in the extension widget under the settings cog. • Turn on 'Experimental' mode to test out new features before they're ready for everyone. Note: The chat styles and theater mode are available for all channels but channel points and prediction are currently only available to a small subset of creators and we are actively rolling out to creators on our waitlist. If you'd like to get Truffle.TV for your livestream reach out here: https://truffle.vip Truffle (experimental mode) also gets you merch discounts on certain creators' stores, better rewards for being a Patron, and more :) Keep an eye on our Twitter for updates: https://twitter.com/trufflevip Formerly known as Mogul.TV and Truffle.TV
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
44 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from Spore Labs, Inc.
- Truffle New Tab | Content Dashboard3,000 users
Popular in Social Networking
- Cisco Webex Extension22,000,000 users
- Mosaic Wallet4,000,000 users
- vidIQ Vision for YouTube4,000,000 users
- LINE4,000,000 users
- Google Mail Checker2,000,000 users