Is AddonMoney safe?

Medium risk

AddonMoney is medium risk. When AddonMoney's worker window navigates, the extension automatically allows popups for the new page, mutes the tab, and removes the generated history entries, affecting the navigated URL and browsing-history record for those navigations.

AddonMoneyv0.109Chrome Web Store
48Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Worker-window navigation changes popup, mute, and history settings.

When AddonMoney's worker window navigates, the extension automatically allows popups for the new page, mutes the tab, and removes the generated history entries, affecting the navigated URL and browsing-history record for those navigations.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-506
Source
Dynamic sandbox
What actually happens
You did this

A worker-window navigation occurs automatically.

The extension did this

AddonMoney allows popups for the navigated origin, mutes the tab, and removes related browsing-history entries.

Fields affected by the worker-window navigation flow
  • Navigated URL
    https://example.com/task (illustrative)

    The URL determines which origin receives the popup permission change and which history entry is removed.

  • Browsing-history entry
    Recent worker-window visit record (illustrative)

    The extension removes the generated history record for the worker-window navigation.

Observation

Observed during dynamic analysis: the tracked worker-window update flow allowed popups, muted the tab, deleted the navigated URL, and removed recent browsing history.

What it can do

Permissions this extension asks for, as declared in version 0.109. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    *://*/*

  • See the address and title of every tab you have open

    tabs

  • Store data in your browser

    storage

  • Act on the current tab, but only after you click the extension

    activeTab

  • Read and change your full browsing history

    history

  • Change per-site browser settings such as cookies, JavaScript and camera access

    contentSettings

  • Clear your browsing history, cache and cookies

    browsingData

  • Show you desktop notifications

    notifications

  • Read information about your displays

    system.display

  • Schedule its own background tasks

    alarms

  • Run its own code inside the pages you visit

    scripting

Updated 30 September 2026epnkbbiedalcmcdonhfbiifnpkgpllgm