Is CFCA CryptoKit.TengCloud Extension safe?

Low risk

The extension relays messages from allowed web pages to a locally installed native signing application.

It lets web pages on its listed sites, including localhost and a few plain-http domains, pick a native host name and send it JSON messages, then returns the native app's reply. Chrome only starts hosts that already list this extension, so it is limited to the vendor's smart-card signing app. No data collection by the extension itself is evidenced.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

kxdy22v3.4.0.2Chrome Web Store
15Risk
Who publishes it

kxdy22 - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
kxdy22

Same store account

2 other listings published from this account, 2 users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 15 October 2026llfnemcimblokcaojnaelajeekjnpihg