Is Lockcard - Vocabulary Builder from YouTube, Articles & AI safe?

Medium risk

Lockcard sends dictionary and translation requests to DeepSeek with a bundled API bearer token.

Lockcard's background service worker handles dictionary and translation actions by calling DeepSeek's chat completions API. Those requests include a hardcoded bearer token shipped inside the extension rather than a user-provided key.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Yongfeng Chaiv1.9.0Chrome Web Store
40Risk
Who publishes it

Yongfeng Chai - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Yongfeng Chai

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Lockcard - Vocabulary Builder from YouTube, Articles & AI contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.deepseek.com

    Lockcard - Vocabulary Builder from YouTube, Articles & AI sends data to api.deepseek.com. 8 other extensions we have analysed send data here.

Updated 30 September 2026opecnacmghifdlgdpejcjmjhpjoipamp