Is Lovable Code Downloader safe?

Clean risk

Lovable Code Downloader reads JWT session tokens from Lovable pages and stores cookie tokens in extension storage.

On https://lovable.dev pages, its content script scans cookies, localStorage, and sessionStorage on load and every 30 seconds for JWT-shaped values. Cookie JWTs are sent to the background worker and saved in chrome.storage.local under storedTokens; localStorage and sessionStorage tokens are returned when the extension asks for fresh tokens.

imubashirhassanv1.0.4Chrome Web Store
0Risk
Who publishes it

imubashirhassan - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
imubashirhassan

Same store account

1 other listing published from this account, 1k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026mgabhfdpnpeioaeoobkbpbcgggfgadce