Is Aurora Player safe?

Clean risk

Aurora Player sends the current page's video URL or site video ID to the local Aurora Player app.

When you click its toolbar button on an HTTP or HTTPS page, Aurora Player injects a script that reads the first video element on the page. It then opens an auroraplayer:// link containing either the video's direct URL or a YouTube/Bilibili video ID, which hands that value to the locally installed Aurora Player protocol handler.

Stefan vdv1.6Chrome Web Store
0Risk
Who publishes it

Stefan vd - 9 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Stefan vd
Declared legal entity
Stefan vd
Registered address
github.com/turnoffthelights, github.com/stefanvd, Antwerp 2000, BE
Registered contact
Open Source Browser Extension

Same store account

9 other listings published from this account, 1.6M+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.6. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Act on the current tab, but only after you click the extension

    activeTab

  • Run its own code inside the pages you visit

    scripting

Updated 30 September 2026ndjbhomcbjmfohlmolecegegielcflmf