Is AutoFormer+ safe?

Medium risk

AutoFormer+ stores visible form fields, including passwords, in each site's localStorage.

When a user saves a field or all fields, the content script reads text areas, inputs, and selects on the page and stores the escaped values under AF1@ keys in window.localStorage. Because password inputs are not excluded and the script runs on all URLs and frames, saved passwords and form entries remain in page-origin storage that scripts for that site can read.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Mykola Onyshchukv0.711Firefox Add-ons
40Risk
Who publishes it

Mykola Onyshchuk - no other listings under this identity, 1 shared hostname

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Mykola Onyshchuk

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

firefoxer.ru
Also called by 3 other listings, including InFormEnter+, AutoFormer+

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.711. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Add items to the right-click menu

    contextMenus

  • See the address and title of every tab you have open

    tabs

Updated 30 September 2026amo-1958