Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeInfinity New Tab
Findings · 3
LOW FINDINGS · 3
  1. 01Sends Google Analytics Measurement Protocol hits (UA-202382853-1, plus -2/-3/-4 sibling properties) with a persistent random clientId stored in localStorage as ga:clientId, screen resolution, color depth, and navigator.language — beyond what the App Store listing discloses.
  2. 02Search-box autocomplete forwards every keystroke typed in the new tab search box to suggestion.baidu.com (Baidu, PRC) when the Baidu search engine is selected; the host is also explicitly allowlisted in the extension's content_security_policy (script-src) and as an optional permission.
  3. 03New-tab page is a vendor-controlled product surface that calls api.infinitynewtab.com (and ws.infinitynewtab.com WebSocket) for wallpapers, icons, search history, account login/sync, and bookmark/dial backup — by design.
OTHER EXTENSIONS

Is Infinity New Tab safe?

Low risk

No summary available.

广 杨v10.0.73Chrome Web Store
20Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Updated 30 May 2026com.inftab.Infinity-New-Tab--Pro-.Extension

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact