CRX aminer
Extension icon

YonMate RPA

Version 8.2025.1020.1037 View in Chrome Web Store

Last scanned: about 6 hours ago

Extension Details

Rating: 0.0 ★
Users: 756

Context-Aware Verdict

CRITICAL
Overall Risk
Trust Factors:

This extension raises significant trust concerns. With only 756 users and a 0.0 rating with no reviews, it lacks community validation. The absence of clear author and developer information makes it impossible to verify the publisher's reputation or legitimacy. The name "YonMate RPA" suggests robotic process automation functionality, but without a proper description, users cannot understand what the extension actually does.

Concerns:

The extension requests an excessive array of high-risk permissions that far exceed what most legitimate extensions require. The combination of cookies, tabs, webNavigation, and scripting permissions with unrestricted host access creates a perfect surveillance toolkit. The nativeMessaging permission allows communication with external applications, potentially bypassing browser security. The unsafe WebAssembly execution policy is particularly concerning as it could hide malicious code. For an RPA tool, these permissions might be technically necessary, but the lack of transparency about functionality makes verification impossible.

Recommendations:

Do not install this extension due to its critical risk level and lack of trustworthy indicators. If RPA functionality is genuinely needed, research established alternatives with clear documentation, verified publishers, and positive user feedback. If you must use this specific extension, create a completely isolated Chrome profile with no access to personal accounts, sensitive data, or important websites. Monitor system behavior closely and remove immediately if any suspicious activity occurs.

Findings

HIGH
Broad Content Script Injection
This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: cookies
This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webNavigation
This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.
HIGH
Unsafe WebAssembly Execution
This extension's Content Security Policy allows 'wasm-unsafe-eval', which permits potentially dangerous WebAssembly code execution. This could be used to hide malicious code or perform CPU-intensive operations.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.