Is Mendeley Web Importer safe?
Clean risk
Mendeley Web Importer is a clean, legitimate browser extension developed by Elsevier for academic reference management. All flagged patterns are false positives: www.ibm.com and www.w3.org are DTD/XML namespace string constants in the parse5 HTML parser library (not network endpoints), the postMessage listener has proper same-origin validation, and IP address collection via api.ipify.org is for standard Adobe Analytics tracking. The extension exhibits expected behavior for a reference management tool with no malicious code or data exfiltration beyond standard SaaS telemetry sent to Elsevier infrastructure.
0Risk
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.