Is GitHub Accelerator: GitHub 文件加速 safe?
GitHub Accelerator routes GitHub downloads through third-party proxy nodes whose 'integrity check' never verifies the downloaded file.
GitHub Accelerator reroutes GitHub release assets, archive downloads, and raw/blob files through proxy nodes pulled from a remote node list, replacing the download with a redirect through whichever node it selects. The extension's health check for these nodes only fetches and hashes a fixed icon image, not the file the user actually requested, so nothing compares the file that comes back through the proxy to what GitHub would have served directly. A compromised or malicious node could swap the downloaded archive or binary while the extension still reports the node as verified.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itNo other listings under this identity
No other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0.9. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 1.1.0, which we have not unpacked yet.
Read and change your data on github.com
*://github.com/*
Read and change your data on codeload.github.com
*://codeload.github.com/*
Read and change your data on raw.githubusercontent.com
*://raw.githubusercontent.com/*
Read and change your data on gist.githubusercontent.com
*://gist.githubusercontent.com/*
Read and change your data on hubp.tbedu.top
https://hubp.tbedu.top/*
Read and change your data on addon-analytics.hubp.org
https://addon-analytics.hubp.org/*
Read and change your data on addon-analytics-hubp.tbedu.top
https://addon-analytics-hubp.tbedu.top/*
Store data in your browser
storage
Add items to the right-click menu
contextMenus
Run its own code inside the pages you visit
scripting
See every page you navigate to, as you navigate to it
webNavigation
Where it sends data
Destinations our analysis observed GitHub Accelerator: GitHub 文件加速 contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- hubp.tbedu.top
GitHub Accelerator: GitHub 文件加速 sends data to hubp.tbedu.top. No other extension we have analysed sends data here.