Is CopyTabTitleUrl safe?

Low risk

CopyTabTitleUrl reads the active tab's document.cookie when its scripting copy option is enabled.

When a user triggers a copy action with the scripting option enabled, the extension injects a script into the active tab and collects page metadata including document.cookie. Those values become format variables such as ${pageCookie} and can be written into the clipboard; the confirmed claim does not involve any network recipient.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

toshiv3.6.4Firefox Add-ons
15Risk
Who publishes it

toshi - no other listings under this identity, 1 shared hostname

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
toshi

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

bugbugnow.net
Also called by 3 other listings, including CopyTabTitleUrl, Reject Service Worker

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.6.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Act on the current tab, but only after you click the extension

    activeTab

  • Write to your clipboard

    clipboardWrite

  • Add items to the right-click menu

    contextMenus

  • Run its own code inside the pages you visit

    scripting

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

Updated 30 September 2026amo-934454