Is LiveReload - Web extension safe?

Clean risk

LiveReload - Web extension injects a localhost LiveReload script into pages after you enable it.

When you click the toolbar button, the extension connects to a LiveReload server on 127.0.0.1:35729 and adds its script to pages on any URL. That LiveReload client reports the current page URL back to the local server over a WebSocket, so software running on your computer can receive the page address.

Todd Wolfsonv20.3.1resigned1Firefox Add-ons
2Risk
Who publishes it

Todd Wolfson - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Todd Wolfson

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 20.3.1resigned1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • See the address and title of every tab you have open

    tabs

Where it sends data

Destinations our analysis observed LiveReload - Web extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • 127.0.0.1:35729

    LiveReload - Web extension sends data to 127.0.0.1:35729. No other extension we have analysed sends data here.

Updated 30 September 2026amo-879230