All reports

Is Picture in Picture safe?

This security report analyses whether Picture in Picture is safe to install on your browser. We check Picture in Picture for malicious behaviour, data exfiltration, suspicious permissions, and known vulnerabilities so you can decide if Picture in Picture is safe for your personal or enterprise fleet.

Critical risk

Malicious extension that transmits every visited URL to developer's server (backend.pictureinpic.com) and injects iframes with server-controlled content into web pages, enabling remote code execution and credential theft.

100Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 10 April 2026hjbbfikgfdpfaabifikbadhgmofabpam

Worried about Picture in Picture? Check what else is installed.

Our free browser scan checks your installed extensions against our threat database in seconds. No signup required.