[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

YouTube Translator & YouTube Video Dubbing

Version 2.5.9 View in Chrome Web Store

Last scanned: about 5 hours ago

Extension Details

Developer: https://www.transmonkey.ai/youtube-video-translator/

Rating: 2.0 ★ (222 ratings)

Users: 60,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension has a moderate user base of 60,000 users, which suggests some level of adoption. However, the concerning 2.0 star rating from 222 reviews indicates significant user dissatisfaction and potential functionality or reliability issues. The developer provides a website (transmonkey.ai) which adds some legitimacy, though the overall trust profile is mixed due to the poor user feedback.

Concerns: The primary concern is the identity permission, which allows access to your Google account identity information including email. This is excessive for a YouTube translation tool that should only need to interact with video content. The storage permission is reasonable for saving translation preferences, but combined with identity access creates privacy risks. The poor rating suggests users may have experienced issues with the extension's behavior or trustworthiness.

Recommendations: Given the medium risk level and poor user ratings, consider running this extension in a separate Chrome profile to isolate it from your main browsing data. Before installation, carefully review what specific identity information the extension requests access to. Monitor the extension's behavior closely and consider alternatives with better ratings and more limited permissions. The combination of identity access and poor user feedback warrants extra caution when using this extension.

Findings

HIGH

High-Risk Permission: identity

This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage
identity
identity.email

Embedded URLs (49 total):

https://clients2.google.com/service/update2/crx	https://www.youtube.com/
https://livepolls.app/	http://127.0.0.1:7244/ingest/48107681-5b41-4427-bb6b-dee0c429b6b1
https://www.imgkits.com/site/get	https://www.imgkits.com/site/save
https://www.livepolls.app/youtube_translation/login?subscribe=1&from=	https://www.livepolls.app/youtube_translation/login?from=
https://www.livepolls.app/youtube_translation/pricing?close=1&passport=	https://www.livepolls.app/youtube_translation/api/user/status
https://www.livepolls.app/youtube_translation/api/user/passport	https://www.livepolls.app/youtube_translation/api/order/download
https://word.maiyizhi.cn/api/video/preview?url=	https://youtube-tts.409198933.workers.dev/tts
https://word.maiyizhi.cn/api/get-youtube-subtitle	https://www.livepolls.app/youtube_translation/api/user/add-monthly-usage
https://www.youtube.com/watch?v=	https://arms-retcode.aliyuncs.com/r.png?
https://www.livepolls.app/video_translator/video-translator?cmvideo=	https://www.livepolls.app/video_translator/video-translator?form=chrome&youtube_url=
http://www.w3.org/2000/svg	https://element-plus.org/en-US/component/input.html
https://element-plus.org/en-US/component/button.html#button-attributes	https://arms-retcode-sg.aliyuncs.com/r.png?
https://retcode-sg-lazada.arms.aliyuncs.com/r.png?	http://arms-retcode-daily.alibaba.net/r.png?
https://arms-retcode-daily.alibaba.net/r.png?	http://arms-retcode-daily.aliyun.test/r.png?
https://retcode-us-west-1.arms.aliyuncs.com/r.png?	https://arms-retcode.orientalgame.com.tw/r.png?
https://arms-retcode-sg.orientalgame.com.tw/r.png?	https://arms-retcode-hz-finance.aliyuncs.com/r.png?
https://element-plus.org/en-US/component/badge.html	https://element-plus.org/en-US/component/time-picker.html
https://element-plus.org/en-US/component/checkbox.html	https://element-plus.org/en-US/component/radio.html
https://github.com/vuejs/vue-next/pull/2485	https://element-plus.org/en-US/component/color-picker.html
https://element-plus.org/en-US/component/dialog.html#slots	https://element-plus.org/en-US/component/drawer.html#slots
http://www.w3.org/1999/xlink	https://element-plus.org/en-US/component/input-number.html
https://element-plus.org/en-US/component/rate.html	https://element-plus.org/en-US/component/slider.html
https://element-plus.org/en-US/component/switch.html	https://www.livepolls.app/youtube_translation/video-translator
https://vuejs.org/error-reference/#runtime-	http://www.w3.org/1998/Math/MathML
https://optim.tildacdn.pub/tild3366-3537-4462-b039-326663663339/-/format/webp/4.jpg

Raw Manifest

{
  "name": "__MSG_extName__",
  "icons": {
    "16": "src/assets/16.png",
    "48": "src/assets/48.png",
    "128": "src/assets/128.png"
  },
  "action": {
    "default_icon": {
      "16": "src/assets/16.png",
      "48": "src/assets/48.png",
      "128": "src/assets/128.png"
    },
    "default_popup": "src/pages/popup/index.html",
    "default_title": "default_title"
  },
  "version": "2.5.9",
  "background": {
    "type": "module",
    "service_worker": "service-worker-loader.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_extDescription__",
  "permissions": [
    "storage",
    "identity",
    "identity.email"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "assets/youtube.js-loader-BABfmvwo.js"
      ],
      "css": [
        "/content.css",
        "assets/index-D1Kw5EMf.css"
      ],
      "run_at": "document_end",
      "matches": [
        "https://www.youtube.com/*"
      ]
    }
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "src/assets/loding.gif",
        "src/assets/128.png",
        "src/assets/youtube_demochr.png"
      ],
      "use_dynamic_url": false
    },
    {
      "matches": [
        "https://www.youtube.com/*"
      ],
      "resources": [
        "src/lib/injetct_get_subtitle.js",
        "assets/index-tg6_j7aN.js",
        "assets/runtime-dom.esm-bundler-DpnchRMq.js",
        "assets/content-BYMqMFM4.js"
      ],
      "use_dynamic_url": false
    }
  ]
}

by ✦ Astarte