Video Downloader for Social Media

Version 1.0 View in Chrome Web Store

Last scanned: 13 days ago | force re-scan

Extension Details

Developer: https://getindevice.com/

Rating: 4.1 ★ (9 ratings)

Users: 539

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a very small user base of only 539 users, which limits community validation. The rating of 4.1 from just 9 reviews provides insufficient feedback to assess reliability. The developer website (getindevice.com) appears to be a tech blog rather than an established software company, which raises questions about long-term support and accountability. The extension is relatively new with version 1.0, indicating limited field testing.

Concerns:

The most significant concern is the extensive list of content script permissions covering over 50 popular social media and video platforms. This broad access scope far exceeds what most users would expect from a video downloader and creates a large attack surface. The extension can inject scripts into highly sensitive platforms including Facebook, Instagram, LinkedIn, Twitter, Reddit, and many others where users share personal information. While video downloading may require some platform access, the sheer breadth suggests potential overreach. The lack of detailed permission information makes it difficult to assess what data the extension can access on these sites.

Recommendations:

Consider running this extension in a separate Chrome profile to isolate it from your main browsing activities. Before installation, carefully review what specific video downloading features you actually need and whether they justify access to so many platforms. Monitor the extension's behavior closely and revoke access if you notice any unexpected activity. Consider alternative video downloaders with more limited scope or better-established developers.

Findings

Security Analysis Details

Embedded URLs (61 total):

https://www.facebook.com/watch/	https://www.facebook.com/watch
https://www.facebook.com/watch/?ref=tab	https://x.com/home
https://x.com/home/	https://www.facebook.com/reel/
https://www.facebook.com/watch/live/?ref=watch	https://www.linkedin.com/feed/
https://getindevice.com/?utm_source=chrome_extension&utm_medium=referral&utm_campaign=extension#url=	https://clients2.google.com/service/update2/crx
https://9gag.com/	https://www.akillitv.com/
https://bandcamp.com/	https://www.bilibili.com/
https://www.bitchute.com/	https://www.blutv.com/
https://www.buzzfeed.com/	https://www.capcut.com/
https://chingari.io/	https://www.dailymotion.com/
https://www.douyin.com/	https://www.espn.com/
https://www.facebook.com/	https://www.febspot.com/
https://www.flickr.com/	https://ifunny.co/
https://www.imdb.com/	https://imgur.com/
https://www.instagram.com/	https://www.izlesene.com/
https://www.kwai.com/	https://www.lemon8-app.com/
https://www.likee.com/	https://www.linkedin.com/
https://www.loom.com/	https://mashable.com/
https://mastodon.social/	https://medal.tv/
https://www.mixcloud.com/	https://mojapp.in/
https://www.mxtakatak.com/	https://ok.ru/
https://pinterest.com/	https://www.puhutv.com/
https://www.reddit.com/	https://rumble.com/
https://sharechat.com/	https://www.snapchat.com/
https://soundcloud.com/	https://streamable.com/
https://substack.com/	https://www.ted.com/
https://web.telegram.org/	https://t.me/
https://www.threads.net/	https://www.tiktok.com/
https://www.tumblr.com/	https://www.twitch.tv/
https://vimeo.com/	https://vk.com/
https://x.com/

Raw Manifest

{
  "name": "Video Downloader for Social Media",
  "icons": {
    "48": "icon.png",
    "128": "icon.png"
  },
  "version": "1.0",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Save videos from your favorite social platforms with just 2 clicks! Supports Facebook, Instagram, X, TikTok & more.",
  "content_scripts": [
    {
      "js": [
        "content.js"
      ],
      "matches": [
        "https://9gag.com/*",
        "https://www.akillitv.com/*",
        "https://bandcamp.com/*",
        "https://www.bilibili.com/*",
        "https://www.bitchute.com/*",
        "https://www.blutv.com/*",
        "https://www.buzzfeed.com/*",
        "https://www.capcut.com/*",
        "https://chingari.io/*",
        "https://www.dailymotion.com/*",
        "https://www.douyin.com/*",
        "https://www.espn.com/*",
        "https://www.facebook.com/*",
        "https://www.febspot.com/*",
        "https://www.flickr.com/*",
        "https://ifunny.co/*",
        "https://www.imdb.com/*",
        "https://imgur.com/*",
        "https://www.instagram.com/*",
        "https://www.izlesene.com/*",
        "https://www.kwai.com/*",
        "https://www.lemon8-app.com/*",
        "https://www.likee.com/*",
        "https://www.linkedin.com/*",
        "https://www.loom.com/*",
        "https://mashable.com/*",
        "https://mastodon.social/*",
        "https://medal.tv/*",
        "https://www.mixcloud.com/*",
        "https://mojapp.in/*",
        "https://www.mxtakatak.com/*",
        "https://ok.ru/*",
        "https://*.pinterest.com/*",
        "https://pinterest.com/*",
        "https://www.puhutv.com/*",
        "https://www.reddit.com/*",
        "https://rumble.com/*",
        "https://sharechat.com/*",
        "https://www.snapchat.com/*",
        "https://soundcloud.com/*",
        "https://streamable.com/*",
        "https://substack.com/*",
        "https://www.ted.com/*",
        "https://web.telegram.org/*",
        "https://t.me/*",
        "https://www.threads.net/*",
        "https://www.tiktok.com/*",
        "https://www.tumblr.com/*",
        "https://www.twitch.tv/*",
        "https://vimeo.com/*",
        "https://vk.com/*",
        "https://x.com/*"
      ]
    }
  ],
  "manifest_version": 3
}

by ✦ Astarte