Is Affixa safe?

Question

Is Affixa safe?

Accepted Answer

Affixa is medium risk. Each time the extension loads and every 15 minutes thereafter, it fetches the Google ListAccounts endpoint to enumerate every Google account signed into the browser. Email addresses are extracted, CRC32-hashed, and stored in chrome.storage.local as persistent identifiers used to key per-account compose preferences. Dynamic analysis confirmed the fetch fires automatically with no user interaction. The extension's Chrome Web Store description does not disclose this recurring account enumeration.

Is Affixa - Gmail (TM) Draft Display safe?

Findings