Is Easy QR safe?

Low risk

Easy QR posts its extension ID into Google pages where page scripts can read the message type.

When Easy QR runs on Google pages, its content script sends a window.postMessage value that includes message types derived from the Chrome extension ID. This makes the extension ID visible to scripts on those matched pages; no network recipient is identified in the claim.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

SoftRoyalsv1.1.7Chrome Web Store
15Risk
Who publishes it

SoftRoyals - 3 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
SoftRoyals

Same store account

3 other listings published from this account, 33k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.1.7. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Act on the current tab, but only after you click the extension

    activeTab

  • Store data in your browser

    storage

  • Add items to the right-click menu

    contextMenus

  • Run its own code inside the pages you visit

    scripting

Updated 30 September 2026lobgmjplponpghhahhmpfhnaiegjipaf