Is Liver safe?

Low risk

Liver sends popup requests to Holodex with a bundled API key.

When you open the extension popup, Liver contacts Holodex to check live VTuber and channel information. Those requests include a hardcoded Holodex API key in an X-APIKEY header and are limited to the popup's product traffic, with no content scripts or page-reading permissions shown in the manifest.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Ziga Macelev0.1.53Chrome Web Store
15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.1.53. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed Liver contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • holodex.net

    Liver sends data to holodex.net. No other extension we have analysed sends data here.

Updated 30 September 2026pjnhlmepkmjikjjmbaiabncnhcbkphfh