Is Team Password Manager safe?
Medium risk
Password manager extension stores API credentials (including plaintext password) in chrome.storage.sync with weak SJCL encryption keyed on guessable material; content script runs on all URLs with all_frames:true, injecting password data into page DOM.
0Risk
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.