Chrome Web Store

49Versions

1Code reviewed

No malware found

In code review (v0.3.10)

Our reviewer read version 0.3.10 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

VisBug, used by 200,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in November 2024.

The extension is a legitimate open-source design tool that uses activeTab and executeScript to inject a visual debugging overlay on user click. No network requests, remote code loading, data collection, or obfuscation are present. The ML risk score of 0.00 aligns with the benign nature. A manifest version mismatch (bundled MV2 vs. published MV3) is noted but is likely due to a newer version deployed on the CWS; it does not indicate malice. Publisher reputation (Google Ireland) and third-party risk score strongly corroborate a false positive.

VisBug

ID: cdockenadnadldjbbgcallicgledbeoc

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

0.4.10

Size

5.38 MB

Rating

4.8/5

Reviews

281

Users

200,000

Type

Extension

Updated

Nov 20, 2024

Publisher Contextual Analysis

Trusted

Author: Google Ireland, Ltd.View Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

46,698,000

Email Change History

1 change

Sep 18, 2025

Screenshots & videos

Install growth

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 3 months ago

5 versions released in this period

Rating Count

Total: 207 ratings+1 (0%)

Average Rating

Current: 4.84 / 5.0+0.03

See plans

React Flow

Internal permhash`9cd02b6680…`
Too common to be evidence

1,494 other extensions carry this fingerprint, 50 of them known malicious. A permission set this common is not evidence on its own; the most installed members are listed for reference.

Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
+1,487 more

Permhash (Mandiant)`9cd02b6680…`
Too common to be evidence

288 other extensions carry this fingerprint, 5 of them known malicious. A permission set this common is not evidence on its own; the most installed members are listed for reference.

Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldnot flagged
Withheldnot flagged
+281 more

Network indicators

4 URLs and 1 IP literals were extracted from this version.

Item	Type	Severity	Description
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
activeTab	Permission	Medium	This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
contextMenus	Permission	Low	This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Open source browser design tools

Read the publisher’s full description

Open source web design debug tools built with JavaScript: a FireBug for designers. - Point, click, move, resize & tinker - Edit or style any page, in any state, like it's an artboard - Inspect styles, spacing, distance, accessibility and alignment - Nitpick layouts & content, in the real end environment, at any device size - Leverage adobe/sketch skills - Edit text, replace images - Design within the chaos: use production or prototypes and the odd states they produce, as artboards and design opportunities - Design while DevTools simulates latency, i18n, media queries, platform constraints, CPUs, screensize, etc - Make more decisions on the front end of your site/app (a11y, responsive, edge cases, etc) - No waiting for developers to expose their legos, just go direct and edit the end state (regardless of framework) and execute/test an idea Give power to designers & content creators, in a place where they currently feel they have little to none, **by bringing design tool interactions and hotkeys to the browser**

User reviews

4.3 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

awesome

Dino Army·22 Sept 2026

One of the most useful extension in my collection. The 5th star will be earned with an UNDO feature

Anna K·30 Jun 2026

Great extension overall. It takes a little time to get comfortable with at first, but once you do, it works really well for quickly rearranging elements on a page while building with Claude Code. A few improvements would make it much easier to use: 1. Add a reset / revert option There should be a button that resets the page back to its original state, or at least lets you undo all current changes and start over. 2. Add layer order controls It would help to have a way to increase or decrease the layer position of elements while moving them. Right now, it is too easy to accidentally move a button or page element and drop it behind something else. 3. Add a collapsible layers panel A collapsible panel on the right side showing the page structure and layers would be very useful. It should list elements such as divs, buttons, input fields, and other components in a visual hierarchy. This would make it much easier to: see the structure of the page at a glance select specific elements from a list highlight where an element is on the page when clicked find and work on elements that are otherwise hard to locate in the browser Overall, this is already a very useful tool. These additions would make it much more practical for layout work and visual editing.

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

IPv4

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version	Size	Verdict	Findings	Permhash
0.4.9 Latest	5.38 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
0.4.7	5.38 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
0.4.6	5.38 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
0.4.5	5.38 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
0.4.4	5.38 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
0.4.3	5.38 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
0.4.1	5.38 MB	Not scanned	—	9cd02b6680d5612e333a981433fa8ea17e47e218b28919f6a4b269e6e9766653
0.3.55	5.35 MB	Not scanned	—	09e502dd65c5b316805c7e42aad6b8a57a1a313c624e62a104a43454b781e670
0.3.53	5.35 MB	Not scanned	—	09e502dd65c5b316805c7e42aad6b8a57a1a313c624e62a104a43454b781e670
0.3.48	5.35 MB	Not scanned	—	09e502dd65c5b316805c7e42aad6b8a57a1a313c624e62a104a43454b781e670

Showing 1 to 10 of 50 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Developer Tools

touchenex 확장8,000,000 users
SentinelOne7,000,000 users
TrendAI™ Toolbar for Enterprise7,000,000 users
React Developer Tools6,000,000 users
ColorZilla4,000,000 users

No malware found

What our analysis found