Is IBM Aspera Connect safe?
IBM Aspera Connect relays unvalidated messages from any web page to the locally-installed Aspera native host.
The extension injects a content script on all URLs that listens for CustomEvents and forwards their contents to a native messaging host (com.aspera.connect.nativemessagehost) without checking whether the originating page is an IBM or Aspera-approved domain. Any site can trigger this relay by dispatching an AsperaConnectRequest event. The extension also responds to AsperaConnectCheck events on any page by sending back the extension version number to all origins.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 4.1.1.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
http://*/*
Read and change your data on every secure site you visit
https://*/*
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging
Act on the current tab, but only after you click the extension
activeTab