Is CFCA CryptoKit.changecloud Extension safe?
CFCA CryptoKit.changecloud Extension bridges its own web pages to a locally installed native application over Chrome's native messaging API.
It only accepts connection requests from pages on CFCA's own changecloud.com.cn and changecloud.cn domains, then relays those requests to a native program installed on the user's machine. The background script forwards the connecting page's chosen native host name and message payload straight through to connectNative() and the native port without checking them against a fixed host id or command list.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itchangecloud - 1 other listing from the same operator, none carrying a finding
changecloud - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 24 users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed CFCA CryptoKit.changecloud Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- Locally installed CFCA native messaging host
CFCA CryptoKit.changecloud Extension sends data to Locally installed CFCA native messaging host. Named as a recipient in this extension's own analysis.