Is Learn Helper safe?

Medium risk

Learn Helper stores auto-login credentials reversibly in local browser storage with a hardcoded XOR key.

When its auto-login helper is enabled, Learn Helper reads the username and password entered on the Tsinghua login page and saves them in chrome.storage.local after XOR-encoding them with a hardcoded key. The extension later decodes those saved values with the same key to fill or perform automatic login, so the stored credentials are reversible rather than strongly protected.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

UltimateGeekerv4.7.2Chrome Web Store
40Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 4.7.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on learn.tsinghua.edu.cn

    *://learn.tsinghua.edu.cn/*

  • Read and change your data on id.tsinghua.edu.cn

    *://id.tsinghua.edu.cn/*

  • Store data in your browser

    storage

  • Start, monitor and manage your downloads

    downloads

  • Block and redirect the requests your browser makes

    declarativeNetRequest

Updated 30 September 2026mdehapphdlihjjgkhmoiknmnhcjpjall