Kaspersky Protection 17.0

Kaspersky is a well-established cybersecurity company with a strong reputation in the antivirus and security software industry. The extension has 60,000 users, indicating reasonable adoption, though the 3.7-star rating from 250 reviews suggests mixed user experiences. The connection to Kaspersky's official infrastructure (scr.kaspersky-labs.com) in the CSP indicates legitimate integration with their security services.

The most significant concern is the use of 'unsafe-eval' in the Content Security Policy, which creates a substantial attack vector for malicious code execution. This is particularly concerning for a security extension that should maintain the highest security standards. The extension uses the older Manifest V2, which lacks the enhanced security protections of V3. The nativeMessaging permission allows communication with native applications on your system, which could be exploited if the extension is compromised. Content scripts running on all HTTP/HTTPS sites provide broad access to web page content.

Given this is a security extension from a reputable company, the risk is somewhat mitigated by Kaspersky's reputation. However, the unsafe-eval permission is concerning for any security tool. Consider running this extension in a separate Chrome profile to isolate potential risks. Monitor for updates that might address the unsafe-eval issue and migrate to Manifest V3. Alternatively, evaluate newer security extensions that use more restrictive security policies while providing similar protection features.