Is Grabbit safe?

Low risk

Grabbit lets webpages trigger right-drag link selection and open attacker-chosen URLs in new tabs.

Grabbit runs drag-selection code on every webpage and treats scripted mouse events like real drags. A page can synthesize a right-drag over links it controls, causing the extension's default action to open those URLs in browser tabs.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Socratispv4.0.2Chrome Web Store
15Risk
Who publishes it

MARCODE LTD - 5 other listings from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Socratisp
Declared legal entity
MARCODE LTD
Registered address
Unit 82a James Carter Road, Mildenhall, BURY ST. EDMUNDS IP28 7DE, GB
Registered contact
MARCODE LTD

Same store account

1 other listing published from this account, 30k+ users between them. 1 of them carries a finding.

Same operator - 4 listings

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

subtiltee.com
Also called by 7 other listings, including Translator for Discord™ Web: Unlimited, Private & No Lag, subtilt%C3%A9e-netflix-youtube, Subtitle Downloader: YouTube Netflix Disney+ Max Apple TV & Any Site

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026madmdgpjgagdmmmiddpiggdnpgjglcdk