Is COSE - 多平台文章同步 safe?

Low risk

The extension exposes a page bridge that lets websites read publisher account details and create drafts.

Any HTTP or HTTPS page can message the extension's content script to check logged-in publisher accounts and receive profile details such as usernames, avatars, and user IDs. The same bridge can ask the extension to create or fill drafts in supported publisher accounts using the user's active sessions and page-supplied title and body content.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

timerringv1.3.6Chrome Web Store

15Risk

Who publishes it

timerring - no other listings under this identity, 31 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher

timerring

Registered contact

John Howe

Website

github.com/doocs/cose/issues

Shared hosts - 31 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

alipay.com

Also called by 1 other listing: FaFaFa-全部发

bbs.elecfans.com

Also called by 1 other listing: FaFaFa-全部发

cdn-static.sspai.com

Also called by 1 other listing

cdnfile.sspai.com

Also called by 1 other listing: Parrot Assistant

cloudcache.tencent-cloud.com

Also called by 1 other listing

devdata.huaweicloud.com

Also called by 1 other listing

developer.volcengine.com

Also called by 1 other listing: 万媒易发 - AI自动化工作流 & 降本增效神器

developerportal.alipay.com

Also called by 1 other listing

elecfans.com

Also called by 1 other listing: FaFaFa-全部发

md.doocs.org

Also called by 1 other listing: FaFaFa-全部发

open.alipay.com

Also called by 1 other listing

static.ws.126.net

Also called by 1 other listing

static001.infoq.cn

Also called by 1 other listing

statics.itc.cn

Also called by 1 other listing

account.cnblogs.com

Also called by 2 other listings, including OpenWrite

bbs.huaweicloud.com

Also called by 2 other listings, including 万媒易发 - AI自动化工作流 & 降本增效神器

bce.bdstatic.com

Also called by 2 other listings

developer.huawei.com

Also called by 2 other listings, including NotebookLM Jetpack

home.51cto.com

Also called by 2 other listings, including OpenWrite

huaweicloud.com

Also called by 2 other listings

pic.rmb.bdstatic.com

Also called by 2 other listings

qianfan.cloud.baidu.com

Also called by 2 other listings

sf3-cdn-tos.toutiaostatic.com

Also called by 2 other listings

svc-drcn.developer.huawei.com

Also called by 2 other listings, including NotebookLM Jetpack

developer.aliyun.com

Also called by 3 other listings, including Parrot Assistant

i.cnblogs.com

Also called by 3 other listings, including 橙心同步助手

lf-web-assets.juejin.cn

Also called by 4 other listings, including 橙心同步助手

my.oschina.net

Also called by 4 other listings, including OpenWrite

xie.infoq.cn

Also called by 4 other listings, including 万媒易发 - AI自动化工作流 & 降本增效神器, OpenWrite

card.weibo.com

Also called by 5 other listings, including 万媒易发 - AI自动化工作流 & 降本增效神器, 橙心同步助手

mp.163.com

Also called by 5 other listings

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed COSE - 多平台文章同步 contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

api.bilibili.com
COSE - 多平台文章同步 sends data to api.bilibili.com. 11 other extensions we have analyzed send data here.
www.zhihu.com
COSE - 多平台文章同步 sends data to www.zhihu.com. One other extension we have analyzed sends data here.
api.juejin.cn
COSE - 多平台文章同步 sends data to api.juejin.cn. No other extension we have analyzed sends data here.
creator.xiaohongshu.com
COSE - 多平台文章同步 sends data to creator.xiaohongshu.com. No other extension we have analyzed sends data here.
www.jianshu.com
COSE - 多平台文章同步 sends data to www.jianshu.com. No other extension we have analyzed sends data here.
xie.infoq.cn
COSE - 多平台文章同步 sends data to xie.infoq.cn. No other extension we have analyzed sends data here.