Is Адаптер Рутокен Плагин safe?

Low risk

Rutoken Plugin Adapter bridges every visited page to a native Rutoken hardware token host via a postMessage relay with no origin restriction.

The extension injects a JavaScript SDK into all pages and listens for postMessage events from page scripts, relaying them to the native host ru.rutoken.firewyrmhost. The runtime extension ID used to authenticate these messages is exposed in discoverable window globals injected by the content script itself, meaning any script on any page can establish a bridge to the native host. No origin allowlist limits which sites may invoke the relay.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Aktiv Companyv1.0.5.0Firefox Add-ons
17Risk
Who publishes it

Aktiv Company - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Aktiv Company
Website

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.5.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Updated 2 November 2026amo-798271