Is Cloud Music Web Player safe?

Medium risk

Cloud Music Web Player sets chromecrxstore.com as Chrome's default search provider, labeled 'Google'.

The extension's manifest replaces Chrome's default search engine with one named 'Google' that sends typed search queries and suggestion requests to chromecrxstore.com. It also opens a chromecrxstore.com search page when you press Enter in the address bar or click the toolbar icon. This is separate from its stated purpose as a cloud music player.

Jesse Whitev1.0.0Chrome Web Store
49Risk
Who publishes it

Jesse White - 7 other listings from the same operator, 6 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Jesse White

Same store account

7 other listings published from this account, 38k+ users between them. 6 of them carry a finding.

Quick Spotify Search: Instant Music & Podcast Finder20k+MediumAmazon Search Pro: Right-Click, Popup & Omnibox (ALL COUNTRIES!)10k+MediumYouTube Music Web Player Search6k+MediumApple Music(iTunes) Web Player2k+MediumApple TV Search362MediumSpotify Web Player Search20Medium1 more listing in the relationship graph, on paid plans →

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Cloud Music Web Player sets chromecrxstore.com as default search, named Google

Code analysis shows the manifest sets chromecrxstore.com as the default search provider under the name Google, so address bar searches are sent to that domain instead of Google.

Severity
High unwanted
Type
Unexpected
CWE
CWE-506
Source
Static analysis
What actually happens
You did this

You type a search into the address bar and press Enter.

No other action is needed after installing the extension.

The extension did this

Chrome sends your search text to chromecrxstore.com instead of Google.

The search engine is listed under the name Google with the keyword google.

The code that does this

manifest.json search provider override

Readable version

Omnibox and toolbar handlers

background.js
chrome.omnibox.onInputEntered.addListener(  function(text) {    let newURL = 'https://chromecrxstore.com/searchamazonmusic?q=' + encodeURIComponent(text) + '&src=omnibox';    chrome.tabs.create({ url: newURL });  });chrome.action.onClicked.addListener(function(tab) {    let url1 = "https://chromecrxstore.com/searchamazonmusic";    chrome.windows.create({        "url": url1    }, );});
Search provider fields declared in the manifest
  • Provider name
    Google

    The name shown in Chrome settings; it reads Google.

  • Search URL
    https://chromecrxstore.com/query/index.html?q={searchTerms}

    Where each address bar query is sent.

  • Suggest URL
    https://chromecrxstore.com/suggest.php?q={searchTerms}

    Where partial text is sent for suggestions.

  • Default flag
    is_default: true

    Makes this provider the default on install.

Hosts that receive search text
    • chromecrxstore.com

    Receives address bar queries and suggestion text; also loaded in tabs opened by the extension.

Observation

Static analysis finding. This behaviour was identified by reading the shipped extension code and has not yet been reproduced in a live run. The trigger conditions and the exact data sent are read from the code, not from an observed capture.

Where it sends data

Destinations our analysis observed Cloud Music Web Player contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • chromecrxstore.com

    Cloud Music Web Player sends data to chromecrxstore.com. 13 other extensions we have analysed send data here.

Updated 15 October 2026ghgeanfaiobhckholijgekklghchglgl