Is Behance saver safe?
Behance Saver is medium risk. Clicking the injected Download button on a Behance project sends project and artist details to a third-party endpoint at artydev.ru: Behance artist ID, name, profile URL, project title, current page URL, image URL, and browser context.
Who publishes itqwertykqwertov - no other listings under this identity
qwertykqwertov - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Behance download clicks send project and artist URLs to artydev.ru
Clicking the injected Download button on a Behance project sends project and artist details to a third-party endpoint at artydev.ru: Behance artist ID, name, profile URL, project title, current page URL, image URL, and browser context.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user clicks the injected Download button on a Behance page.
The extension posts Behance artist identifiers, project titles, page URLs, image URLs, and browser context to a third-party processing endpoint.
- Current Behance URLhttps://www.behance.net/gallery/123456789/example-project (illustrative)
Shows which Behance project page the user was viewing when they clicked Download.
- Project titleExample Portfolio Project (illustrative)
Identifies the Behance album or project associated with the download request.
- Browsing history contextBehance project page and selected image URL (illustrative)
Links the download action to a specific visited Behance project and image URL.
Dynamic analysis confirmed the POST request path described by the static evidence. The extension listing describes image downloading functionality, while the recorded request sends Behance project and artist metadata to an unrelated third-party domain.
What it can do
Permissions this extension asks for, as declared in version 2.2.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Store data in your browser
storage