Is IDmelon WebLogin safe?

Medium risk

IDmelon WebLogin accepts unauthenticated postMessages from any webpage and can redirect its backend API calls to an attacker-controlled server.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

IDmelon Technologies Inc.v1.23.4Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 22 July 2026eagmgpbjpedchliifpgfgogdknnmkaej