Is BookmarkMars Assistant safe?
书签地球助手 sends visited page URLs and titles to its statistics endpoint when record-visit mode is enabled.
The extension's all-sites content script reports the current URL, page title, and referrer to its background worker on page load. If the synced record-visit setting is enabled, the worker queues a view event with the URL, title, visit time, user ID, favicon, and browser name, then posts the queue to the vendor statistics endpoint.
Who publishes itBookmark earth family - no other listings under this identity
Bookmark earth family - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Record-visit mode sends visited page URLs and titles to statistics endpoint
When record-visit mode is enabled, the extension records pages you visit and posts the page URL, title, and referrer to extensions.chatchatstudy.com/plugin/statistics.
Collection runs from an all-sites content script.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
User action required: record-visit mode is enabled while the user browses pages.
The extension sends visited page URLs, page titles, referrers, and related visit metadata to the vendor statistics endpoint.
- Browsing history eventview (illustrative)
Shows that a page visit was recorded as a browsing event.
- Visited page URLhttps://example.com/article (illustrative)
Identifies the specific web page the browser loaded.
- Page titleExample Article Title (illustrative)
Provides readable context about the visited page content.
- Referrerhttps://search.example/results (illustrative)
Shows the page or site that led to the visited URL when available.
Where it sends data
Destinations our analysis observed BookmarkMars Assistant contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- extensions.chatchatstudy.com
BookmarkMars Assistant sends data to extensions.chatchatstudy.com. No other extension we have analysed sends data here.