Chrome Web Store

3Versions

1Code reviewed

No malware found

In code review (v0.5.5)

Our reviewer read version 0.5.5 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Web Developer, used by 1,000,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can read and change data on all websites and can inject scripts into pages.

Key findings

high· other —The bundled manifest declares manifest_version: 2 and permissions: ['browsingData', 'contentSettings', 'cookies', 'history', 'storage', 'tabs', '<all_urls>'], while the published listing shows manifest_version: 3 with permissions including 'scripting' and host_permissions: ['<all_urls>']. This discrepancy could indicate a delayed-malicious update or an undeclared version change.

After reviewing the source code, the extension performs legitimate web developer tasks (inspecting cookies, disabling styles, etc.) using the requested permissions. All data handling is local or user-initiated. The manifest version mismatch (bundled v2 vs published v3) is a discrepancy, but likely due to a listing update not reflected in the provided bundle. The extension has a trusted publisher, high user count, and no malicious code patterns.

Web Developer Chrome extension security report

ID: bfbameneiokkgbdmiekhjnmfkcnldhhm

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Active

Version

3.0.1

Size

0.56 MB

Rating

4.5/5

Reviews

2,833

Users

1,000,000

Type

Extension

Updated

Jun 29, 2024

Publisher Contextual Analysis

Trusted

Author: http://chrispederick.com/
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

1,000,000

Screenshots & videos

Install growth

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 2,824 ratings

Average Rating

Current: 4.46 / 5.0-0.01

See plans

React Flow

Internal permhash`fa74c4086c…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Permhash (Mandiant)`599fca47c1…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Network indicators

54 URLs and 1 IP literals were extracted from this version.

Item	Type	Severity	Description
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>	Host	Critical	Broad host access — the extension can read/modify content on every website.
browsingData	Permission	High	This permission clears browsing data, history, and redis. Rated High because it can destroy evidence of malicious activity, clear security logs, and modify browser state.
contentSettings	Permission	High	This permission allows modification of website-specific content settings. Rated High because it can disable security features like JavaScript restrictions, mixed content blocking, and cookie controls for specific sites.
cookies	Permission	High	This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
history	Permission	High	This permission grants access to your complete browsing history. Rated High because it can track all visited websites, reveal sensitive browsing patterns, and expose private information.
Broad Host Permissions	Risk Factor	High	This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access	Risk Factor	High	This extension can inject scripts into any website.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Adds a toolbar button with various web developer tools.

Read the publisher’s full description

The Web Developer extension adds a toolbar button to the browser with various web developer tools. This is the official port of the Web Developer extension for Firefox. -------------------- The best place for support is not in the reviews section below, but on the Web Developer site in the help: https://chrispederick.com/work/web-developer/help/ Also available there are a full set of release notes: https://chrispederick.com/work/web-developer/history/chrome/

User reviews

3.7 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Very useful. Sure the UI is a bit off, but very cool.

Archer Turner·23 Sept 2026

Don't how it ended up on my Chrome. Didn't install it. Probably a fraud.

Renat Khairetdinov·29 Jul 2026

Our Facebook business manager Company and entire facebook account got hacked directly after installing this extension, and without resetting or changing my password and that's another proof that it was this extension since it has an access to the cookies, He used the cookies to access my account and removed all the members with full access to employee access then added his fake accounts and posted something that violates Facebobok policies to lead my account to suspension and now he spent over $1,000 from my accounts , Please be careful and I hope no one ever to experience what I been through the last days

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

IPv4

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version	Size	Verdict	Findings	Permhash
0.5.5 Latest	1.10 MB	No malware found	0	2991285337c072c225ba5911423a71f8d8156f3ea81e371f05c0f2bbfced387a
0.5.4	1.10 MB	Not scanned	—	b17ded27d0ecdaf1d2d58af2d743bf6203c9aa9e1e70e7725f3d99b213e04034
3.0.1	0.56 MB	Not scanned	—	599fca47c17794e14c3efe58b441cba3d44577583446bb14f5be2ac0f969f2d4

Showing 1 to 3 of 10 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Developer Tools

GoFullPage - Full Page Screen Capture11,000,000 users
TouchEn PC보안 확장9,000,000 users
SentinelOne6,000,000 users
React Developer Tools5,000,000 users
ColorZilla4,000,000 users

No malware found