Is Easy Youtube Video Downloader Express safe?

The extension sends PRO activation emails to videodroid.org and injects remotely-controlled notifications into YouTube pages.

When users enter their payment email as a PRO activation key, the extension base64-encodes it and transmits it as a plaintext GET parameter to videodroid.org, where it is visible in server logs and to network observers. On install and startup, the extension also contacts a Cloudflare Worker at json-update-button.eytvd.workers.dev to retrieve notification content, which is then rendered on YouTube pages and can open any HTTPS URL via window.open. A compromised or malicious Cloudflare Worker could push arbitrary URLs to all users' browsers.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.