Is iFoxTab 新标签页（GPT） safe?

#!/usr/bin/env node
/**
 * iFoxTab URL Tracking — AES key verification
 * Extension: ckngkkfngaahffndbeciefgokaobnmkk (iFoxTab 新标签页（GPT）)
 * Key source: content.js:46725-46726
 *
 * Usage: node ifox-url-decrypt.js [base64_ciphertext]
 * With no argument, runs a round-trip self-test with a sample payload.
 */
const crypto = require('crypto');

const KEY = Buffer.from('CMApH8hrfZ55rM2F', 'utf8');  // 16 bytes = AES-128
const IV  = Buffer.from('17v06ic1Ewd2nTOe', 'utf8');  // 16 bytes

function decrypt(b64) {
    const decipher = crypto.createDecipheriv('aes-128-cbc', KEY, IV);
    const buf = Buffer.concat([decipher.update(Buffer.from(b64, 'base64')), decipher.final()]);
    return JSON.parse(buf.toString('utf8'));
}

function encrypt(obj) {
    const cipher = crypto.createCipheriv('aes-128-cbc', KEY, IV);
    const buf = Buffer.concat([cipher.update(Buffer.from(JSON.stringify(obj), 'utf8')), cipher.final()]);
    return buf.toString('base64');
}

if (process.argv[2]) {
    console.log('Decrypted URL array:');
    console.log(JSON.stringify(decrypt(process.argv[2]), null, 2));
} else {
    // Self-test
    const sample = [
        {action:'OPEN', key:'https://www.facebook.com', num:2, space:'PLUGIN', widget:'URL_ANALYSIS'},
        {action:'OPEN', key:'https://www.amazon.com',   num:1, space:'PLUGIN', widget:'URL_ANALYSIS'}
    ];
    const ciphertext = encrypt(sample);
    const recovered  = decrypt(ciphertext);
    console.log('Key:', KEY.toString());
    console.log('IV: ', IV.toString());
    console.log('Ciphertext (b64):', ciphertext);
    console.log('Recovered URLs:');
    recovered.forEach(e => console.log(' -', e.key, '(visits:', e.num + ')'));
    console.log('\nRound-trip OK:', JSON.stringify(sample) === JSON.stringify(recovered));
}