Is AutoMute safe?

Question

Is AutoMute safe?

Accepted Answer

AutoMute is critical risk. When you use AutoMute, it connects to a WebSocket host at gitea.neobay.co.kr:3000. A WebSocket message can tell the extension to open a URL, read document.cookie from that page, and transmit the cookie string back to that host. The affected data includes page URLs, cookies, and credential-bearing cookie values on sites the extension can access. AutoMute accepts remote WebSocket commands that can open a supplied URL, inject a scraper, and return the page content. The confirmed behavior sends DOM content, the page URL, and page title back to gitea.neobay.co.kr:3000 after a user action is required.

Is AutoMute safe?

Findings