Chrome Web Store

100Versions

1Code reviewed

No malware found

In code review (v1.3.3)

Our reviewer read version 1.3.3 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

XKit Rewritten, used by 40,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in September 2026.

Analyst notes

All network requests are to Tumblr's own API endpoints (first-party for a Tumblr enhancement), no data is sent to external servers, and only the 'storage' permission is used for legitimate preferences. The extension matches its stated purpose of providing UI tweaks for Tumblr. The ML hits (e.g., js_post_requests, js_innerhtml) are typical of content scripts interacting with APIs and modifying DOM, not malicious behavior. Publisher is trusted with a posted privacy policy stating no data collection.

XKit Rewritten Chrome extension security report

ID: ehgbadgnkmeeldglkmnplolneidgpbcm

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

1.3.7

Size

0.35 MB

Rating

4.5/5

Reviews

Users

40,000

Type

Extension

Updated

Sep 14, 2026

Publisher Contextual Analysis

Trusted

Author: April Sylph
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

42,420

Email Change History

1 change

Apr 14, 2025

Domain changed

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Install growth

User Growth

Showing data from Sep 10, 2023 to Sep 08, 2024

Versions

No change in user count

Compared to 3 months ago

13 versions released in this period

Rating Count

Total: 49 ratings

Average Rating

Current: 4.53 / 5.0-0.14

See plans

React Flow

Internal permhash`49a25f9fee…`
Too common to be evidence

42,796 other extensions carry this fingerprint, 5,268 of them known malicious. A permission set this common is not evidence on its own; the most installed members are listed for reference.

Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
+42,789 more

Permhash (Mandiant)`49a25f9fee…`
Too common to be evidence

72,711 other extensions carry this fingerprint, 7,256 of them known malicious. A permission set this common is not evidence on its own; the most installed members are listed for reference.

Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
+72,704 more

Item	Type	Severity	Description
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.

About this extension

The enhancement suite for Tumblr's new web interface

Read the publisher’s full description

A comprehensive collection of extra features and interface tweaks for Tumblr. This incarnation of XKit has been designed from the ground up to target Tumblr's new React-based site, which launched in April 2020. Check out the wiki for a full list of features!

User reviews

3.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

The only thing I'm really missing from the old xkit was the ability to mass delete by post type. It was really the main feature I was using xkit for.

Maritza Hernandez·29 Jul 2026

Was looking for an extension that'd let me void reblogs from my dash. This was just what I was looking for and more!!

R“

Rosie “slaughterosie” Slaughter·15 May 2026

Stopped working some time over the weekend :(

bill cipher

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No network indicators were extracted from this version.

Version	Size	Verdict	Findings	Permhash
1.3.7 Latest	0.35 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.2.1	2.34 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.3.6	2.36 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.3.5	2.36 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.3.4	2.36 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.3.3	2.35 MB	No malware found	0	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.3.2	2.34 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.3.1	2.35 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.3.0	2.35 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.2.3	2.34 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7

Showing 1 to 10 of 100 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Social Networking

Cisco Webex Extension22,000,000 users
Mosaic Wallet4,000,000 users
LINE4,000,000 users
Google Mail Checker2,000,000 users
Bitmoji2,000,000 users

No malware found

What our analysis found