Chrome Web Store
85Versions
1Code reviewed

Caution required

Suspicious in code review (v1.0.96)

Our reviewer found behaviour consistent with malware in version 1.0.96, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

66 indicators in this extension

66 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

YCS - YouTube Comment Search, used by 50,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. Its permissions mean it can inject scripts into pages.

Key findings

  • High

    Other

    The extension's manifest declares manifest_version: 2 and only the host permission '*://*.[domain withheld]'. The published CWS summary states manifest_version: 3 with additional permissions 'storage' and 'scripting'. This mismatch could indicate a supply chain issue, an improperly packaged update, or a listing error, reducing confidence in the extension's compliance with its stated capabilities.

Analyst notes

The extension's source code shows no malicious behavior: it performs local caching, comment export, and communicates only with YouTube pages via postMessage. However, the bundled manifest (manifest_version: 2) does not match the published CWS summary (manifest_version: 3, permissions: storage, scripting). This discrepancy is a moderate security concern, as it may indicate a packaging error or a discrepancy in the release process. No data exfiltration or tracking was observed.

YCS - YouTube Comment Search

YCS - YouTube Comment Search Chrome extension security report

ID: pmfhcilikeembgbiadjiojgfgcfbcoaa

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.1.14
Size
0.28 MB
Rating
2.5/5
Reviews
561
Users
50,000
Type
Extension
Updated
Oct 4, 2024
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Trusted
Author
YCS
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
50,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
*://*.youtube.com/*
Host
Medium
Host permission — access limited to this URL pattern.

66 indicators in this extension

66 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Search comments, replies, chat replay, video transcript for the current video on YouTube by contents, authors, time.

Read the publisher’s full description

The YCS (YouTube Comment Search) is a chrome extension. Search comments, replies, chat replay, video transcript for the current video on YouTube by contents, authors, time. Features: ✅ Quick search by timestamp, author, content ✅ Export comments, replies, chat replay, video transcript ✅ Flexible (fuzzy) search ✅ Multilingual search ✅ Search by Emoji ✅ Works in incognito mode ✅ Unlimited load comments ✅ Time stamps - show comments, replies with time stamps ✅ Author - show comments, replies and chat comments from the author ✅ Likes - show comments, replies by number of likes (sort largest to smallest) ✅ Replied - show comments by number of replies (sort largest to smallest) ✅ Members - show comments, replies and chat comments from channel members ✅ Donated - show chat comments from users who have donated ✅ Show random comment ✅ Small size, low use CPU and memory Instructions: 1. Open video on YouTube 2. Find the YCS extension under the current video and click the button "Load all" or choose to load the categories 3. Write the search query, press Enter or click the button Search FAQ 1) How to like, reply to a comment? In the search results, click on the date (like, "2 months ago") of the comment, reply and will open a new window with an active comment or reply under the video, where you can do any action. 2) How do I find all timestamped comments and replies on a video? Click on the "Time stamps" button under the search bar. 3) How can I find addressed to user's comments, replies? Write " @ " in the input field. 4) How can I view the contents of the video transcript at a specific minute? You can write a search query for Trp. Video, in the " mm:ss " format. For example: " : " - all the text of the video transcript. " 15: " - all the text in the 15th minute. And etc. 5) How can I view the comment for a found reply? Click on the " ▼ " button. 6) How can I see the all replies to the found comment? In the header of the found comment, you can find the reply icon and the count, to see the replies click on the " + " button. 7) How to use search in YouTube shorts? Open a YouTube video short. Click badge YCS (right of the address bar) and click on the button Open YT short. You can use the search engine (YCS), while loading comments, chat, transcript video.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
66

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

66 indicators in this extension

66 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.1.13
Latest
0.28 MBNot scanned—
efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9
1.1.12
0.23 MBNot scanned—
efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9
1.1.11
0.23 MBNot scanned—
efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9
1.1.10
0.23 MBNot scanned—
efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9
1.1.9
0.23 MBNot scanned—
efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9
1.1.8
0.23 MBNot scanned—
efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9
1.1.7
0.25 MBNot scanned—
efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9
1.1.6
0.25 MBNot scanned—
efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9
1.1.5
0.25 MBNot scanned—
efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9
1.1.4
0.25 MBNot scanned—
efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9
Showing 1 to 10 of 90 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Tools