Is FLYFF_Helper safe?

Low risk

FLYFF_Helper lets any site send commands to its local FlyFF WebSocket bridge.

Because flyff.js is web-accessible on all URLs and listens for window messages without checking origin, any webpage can load it and ask it to connect to wss://localhost:8888/flyff. A page can then send caller-chosen Target and Cmd values through the extension's SEND command to the local helper service.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

illuminechenv2.5Chrome Web Store
15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed FLYFF_Helper contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • localhost:8888

    FLYFF_Helper sends data to localhost:8888. Named as a recipient in this extension's own analysis.

Updated 30 September 2026hldmengidmmokgneialjemmjhhijnodi