Is Live Chat Overlay safe?

Low risk

Live Chat Overlay sends browser language, timezone, and YouTube video ID to its server on every live chat page load and injects the server's response into the page without sanitization.

Each time a YouTube live chat page loads, the extension automatically POSTs the user's browser language, timezone, and the current video ID to chat.aaronpk.tv/featured.php. The server response is used to construct and inject an HTML element directly into the page body; the response values are not validated or escaped before insertion. A server returning crafted content could cause arbitrary HTML to appear on the page.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Aaron Pareckiv0.3.9Chrome Web Store
20Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Data recipients

chat.aaronpk.tv
Updated 17 September 2026aplaefbnohemkmngdogmbkpompjlijia