Is CFCA CryptoKit.GZRailway Extension safe?

Clean risk

CFCA CryptoKit lets pages on its vendor domains open a native messaging port and relay requests to a local host.

The extension listens for messages from gzrailway.com.cn, guangzh.cr, perfectsign.com.cn and local 127.0.0.1 pages. Those pages can name a native messaging host to connect to and send it arbitrary function-call data, and the native reply is returned to the page. It has no content scripts, and the native host must separately allow this extension.

kxdy22v3.4.0.2Chrome Web Store
0Risk
Who publishes it

kxdy22 - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
kxdy22

Same store account

2 other listings published from this account, 2 users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 15 October 2026mkacohekjamajbonmbpoelfjmddhaddi