Is discord-token-login_ff safe?

discord-token-login_ff is medium risk. The rating reflects signals from our analysis that have not yet been published as detailed findings.

Who makes discord-token-login_ff?

discord-token-login_ff is published by gate.

Is Discord Token Login safe?

Medium risk

Discord Token Login injects popup-entered token text into Discord pages through unsafely constructed script code.

When you submit a token, the popup builds a JavaScript string and runs it on the active Discord tab. Because the token text is inserted without escaping, text containing a quote can add JavaScript before the login helper runs; the extension's permissions limit this injection to discord.com pages.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

gatev1.0.0Firefox Add-ons

40Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

Read and change your data on discord.com
http://*.discord.com/* and 1 more