Is CFCA SecEditCtl.SSIB Extension safe?

Clean risk

CFCA SecEditCtl.SSIB Extension lets approved bank and localhost pages relay messages to a native CFCA host.

Pages matching the extension's SSIB bank, SSVB, UAT, and localhost allowlist can ask it to open a Chrome native-messaging connection. After a connection is opened, the extension forwards page-supplied message objects to the local native host and returns native callbacks to the active tab.

spd-svbankv3.2.0.5Chrome Web Store
1Risk
Who publishes it

spd-svbank - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
spd-svbank

Same store account

1 other listing published from this account, 1k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.2.0.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Updated 30 September 2026hbjciihmfhahfdagieiegnacfmhifphg