CRX aminer
Extension icon

Simple Douyin Downloader 简单抖音下载器

Version 1.6 View in Chrome Web Store

Last scanned: 5 months ago | force re-scan

Extension Details

Rating: 4.0 ★ (22 ratings)
Users: 6,000

Context-Aware Verdict

HIGH
Overall Risk
Trust Factors:

The extension has a moderate user base of 6,000 users with a decent 4.0-star rating from 22 reviews, suggesting basic functionality works as intended. However, the lack of developer information and company details raises transparency concerns. The extension targets Douyin (TikTok's Chinese version), which is a legitimate use case for a video downloader.

Concerns:

The combination of webRequest and downloads permissions creates significant privacy and security risks. The webRequest permission allows the extension to intercept and potentially modify all network traffic on Douyin domains, which could be exploited to capture sensitive data or inject malicious content. The downloads permission, while necessary for the core functionality, also grants access to download history. The CSP policy allowing localhost connections is unusual and could indicate development/debugging code left in production. The broad host permissions across multiple Douyin-related domains expand the attack surface unnecessarily.

Recommendations:

Run this extension in a separate Chrome profile dedicated to video downloading activities. Avoid using it while logged into sensitive accounts or browsing other websites. Monitor your download folder for unexpected files. Consider using alternative video downloaders with more transparent developers and narrower permissions. If you must use this extension, disable it when not actively downloading videos and regularly review your download history for suspicious activity.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: downloads
This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webRequest
This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: activeTab
This extension has the activeTab permission. Can access the active tab when clicking the extension icon.