Chrome Web StoreNo malware found
In code review
Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.
9 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
xPath Finder, used by 50,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in March 2025.
Analyst notes
The extension's source code is transparent and performs exactly the stated functionality: it allows users to click on elements to obtain their XPath. All DOM manipulation (innerHTML, appendChild) is limited to creating overlay highlights and displaying the XPath string; no network requests, data exfiltration, or obfuscation is present. The permissions (activeTab, scripting, storage) are used only for the declared purpose and are disclosed. The publisher's one other flagged extension does not affect this code, which is clean. The ML model likely overfitted on the presence of scripting permission, innerHTML, and appendChild, which are common in legitimate developer tools.
xPath Finder Chrome extension security report
ID: ihnknokegkbpmofmafnkoadfjkhlogph
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Tomasz Rembacz
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
Screenshots & videos
Install growth
Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.
Data Exfiltration
Code review completed; no malicious patterns detected for this category.
Unauthorized Data Collection
Code review completed; no malicious patterns detected for this category.
Network Interception
Code review completed; no malicious patterns detected for this category.
Code Injection
Code review completed; no malicious patterns detected for this category.
Credential Theft
Code review completed; no malicious patterns detected for this category.
Obfuscation
Code review completed; no malicious patterns detected for this category.
Tracking
Code review completed; no malicious patterns detected for this category.
Privilege Escalation
Code review completed; no malicious patterns detected for this category.
Phishing
Code review completed; no malicious patterns detected for this category.
Remote Code Loading
Code review completed; no malicious patterns detected for this category.
Other
Code review completed; no malicious patterns detected for this category.
9 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Click on any element to get the xPath
Read the publisher’s full description
Plugin to get the elements xPath. Usage: 1. Click on the plugin icon, cursor will be changed to the crosshair 2. Hover over the desired element (elements are highlighted on hover) 3. Click on the element and his xPath will display in the panel at the bottom of the page Options: - turn on/off inspector, - turn on/off auto copy to clipboard, - choose between short ID's or normal path, - change xpath box position
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
9 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from Tomasz Rembacz
- Wykop Player Remover2 users
Popular in Developer Tools
- GoFullPage - Full Page Screen Capture11,000,000 users
- touchenex 확장8,000,000 users
- TrendAI™ Toolbar for Enterprise7,000,000 users
- SentinelOne6,000,000 users
- React Developer Tools5,000,000 users