Is ClickLearn Connector safe?
ClickLearn Connector fetches arbitrary JavaScript from its remote server and executes it on every open browser tab.
On startup, the extension retrieves a JavaScript payload from services.clicklearn.dk and broadcasts it to all open tabs via chrome.tabs.sendMessage. A content script running in the MAIN world on every page receives this payload and executes it using an obfuscated eval() call. Separately, the extension monkey-patches XMLHttpRequest on all pages to capture IFS Aurena and IFS FSM API response bodies, and its postMessage relay accepts instructions from any web origin without validating the sender.
Strong link to a flagged operator: 1 of the 3 other listings from the same operator is rated high or critical for malicious behavior. Flagged: ClickLearn Assist (high).
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itClickLearn - 3 other listings from the same operator, 1 of them carrying a finding
ClickLearn - 3 other listings from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
3 other listings published from this account, 14k+ users between them. 1 of them carries a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 12.1.55.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
See the address and title of every tab you have open
tabs
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging
Store data in your browser
storage
Show you desktop notifications
notifications
Run its own code inside the pages you visit
scripting
Where it sends data
Destinations our analysis observed ClickLearn Connector contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- services.clicklearn.dk
ClickLearn Connector sends data to services.clicklearn.dk. No other extension we have analyzed sends data here.