Is Hoppscotch Browser Extension safe?

Medium risk

Legitimate API testing tool with a postMessage handler lacking proper origin validation on hookContent.js, creating potential for message injection from malicious sites.

Hoppscotch Supportv0.37Chrome Web Store
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 21 May 2026amknoiejhlmhancpahfcfcfhllgkpbld