Is Excellent Data Filler safe?

Low risk

Excellent Data Filler injects content scripts on every page that hook network requests and accept unvalidated postMessage commands from any web origin.

The extension runs content scripts on all URLs with multiple unguarded postMessage listeners: one allows any page to overwrite extension storage and reconfigure URL monitoring, another allows any embedded iframe to trigger extraction of form field values (including current values) with results broadcast to any origin. A separate injected script patches XMLHttpRequest and fetch on every page to capture request URLs, methods, headers, and bodies for use in the extension's automation workflows.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

C Tech Hindiv4.13.4Chrome Web Store
20Risk
Who publishes it

C Tech Hindi - 1 other listing from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
C Tech Hindi

Same store account

1 other listing published from this account, 1k+ users between them. 1 of them carries a finding.

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

api.2captcha.com
Also called by 6 other listings, including CGI US Visa Appointment Auto Rescheduler

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026abafaagbfhobgjkcepckbnadafflkdea