Chrome Web Store
11Versions
1Code reviewed

No malware found

In code review (v0.0.4)

Our reviewer read version 0.0.4 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

17 indicators in this extension

17 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Wordmark Extension, used by 90,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 2 findings (1 high, 1 low), led by other. It comes from a trusted publisher and was last updated in April 2025.

Key findings

  • High

    Other

    The bundled declares manifest_version 2 and only the 'fontSettings' permission, while the published manifest on the Chrome Web Store indicates manifest_version 3 with additional permissions 'activeTab', content scripts, and web_accessible_resources. This mismatch suggests the extension may have been updated on the store to a more capable version not reflected in the reviewed source, posing a transparency risk.

  • Low

    Unauthorized Data Collection

    The extension configures Bugsnag error monitoring with API key '222886885ed7986f0c3965744d5f689b' and sends error reports to [domain withheld] when exceptions occur. This constitutes data collection to a third-party service. The Chrome Web Store listing for this extension states data collection: 'none declared', making this an undisclosed tracking mechanism. While the data sent is limited to error stack traces and metadata, the lack of disclosure is a privacy hygiene issue.

Analyst notes

The extension's code implements the described font synchronization functionality using chrome.fontSettings.getFontList and externally_connectable to [domain withheld]. No malicious data exfiltration, injection, or credential theft was found. However, the bundled manifest (MV2, fontSettings only) contradicts the CWS-published manifest (MV3, activeTab, content scripts, web_accessible_resources), and the extension uses Bugsnag error reporting without disclosing it in the CWS data collection list — both are hygiene issues but not indicative of malice.

Wordmark Extension

Wordmark Extension Chrome extension security report

ID: plafaneablgcojpbaeefkmnheilloopl

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
0.2.1
Size
0.03 MB
Rating
4.3/5
Reviews
97
Users
90,000
Type
Extension
Updated
Apr 2, 2025
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
Wordmark OÜ
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
90,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6

Install growth

Item
Type
Severity
Description
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
fontSettings
Permission
Low
This permission controls browser font rendering settings. Rated Low because it only affects visual display preferences without access to content.

17 indicators in this extension

17 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Syncronize your fonts with Wordmark + Preview fonts on any website

Read the publisher’s full description

Welcome to the new Wordmark browser extension! This simple tool detects fonts installed on your computer and shares them with Wordmark (https://wordmark.it). It also lets you discover, preview, and test fonts on any website you visit. # What is Wordmark? Wordmark is a web app that helps you preview and choose fonts by displaying their text in all the fonts installed on your computer. It offers features like tagging and categorizing fonts, sharing font previews with customers, and exporting designs to Cricut and Silhouette. With its user-friendly interface and efficient font selection process, Wordmark is widely used by crafters, designers, and creatives who work with fonts every day. Learn more about Wordmark on https://wordmark.it/ --- Originally built to detect installed fonts for Wordmark, the extension has grown into a font discovery tool, helping crafters and designers explore and test new fonts directly in their browser. # Discover New Fonts While Browsing Easily see which fonts are used on any website you visit. The extension displays a badge with the number of web fonts it detects. Pin it for quick access and explore fonts as you browse. # See How Web Fonts Look with Your Text Type your own text and see how it looks in the fonts used on a webpage. Adjust the size ot zoom in for a closer look. # Export Font Previews as Images You can export the font previews as images to keep as a reference, import into other apps, or share it with others.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
12

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

17 indicators in this extension

17 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
0.1.0
Latest
0.02 MBNot scanned—
a140cfe6500e83df6bc8742b8453c02eaf8b27cf9cc7c61fbe33f86109f3c448
0.0.9
0.02 MBNot scanned—
a140cfe6500e83df6bc8742b8453c02eaf8b27cf9cc7c61fbe33f86109f3c448
0.0.8
0.02 MBNot scanned—
a140cfe6500e83df6bc8742b8453c02eaf8b27cf9cc7c61fbe33f86109f3c448
0.0.7
0.02 MBNot scanned—
a140cfe6500e83df6bc8742b8453c02eaf8b27cf9cc7c61fbe33f86109f3c448
0.0.6
0.02 MBNot scanned—
a140cfe6500e83df6bc8742b8453c02eaf8b27cf9cc7c61fbe33f86109f3c448
0.0.5
0.02 MBNot scanned—
a140cfe6500e83df6bc8742b8453c02eaf8b27cf9cc7c61fbe33f86109f3c448
0.0.4
0.02 MBNo malware found0
a140cfe6500e83df6bc8742b8453c02eaf8b27cf9cc7c61fbe33f86109f3c448
0.2.0
0.03 MBNot scanned—
5cf39659f4666648edfce283b28c1046731c519cd4592096682fab5fb4d9b6c1
0.2.1
0.03 MBNot scanned—
5cf39659f4666648edfce283b28c1046731c519cd4592096682fab5fb4d9b6c1
0.1.3
0.03 MBNot scanned—
5cf39659f4666648edfce283b28c1046731c519cd4592096682fab5fb4d9b6c1
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Workflow & Planning