Is MagicalDownloader safe?
MagicalDownloader lets any web page send media URLs to ffmpeg.bmmmd.com and trigger its background commands.
The extension runs a content script on every web page that accepts window.postMessage commands without checking where they come from. A page can use these to open the vendor's ffmpeg.bmmmd.com processing site with media URLs of its choosing, or to send commands to the background script such as injecting packaged scripts into a tab, changing a tab's user agent, or adding entries to the media list. Media URLs passed this way are sent to the vendor processing site.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.6.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
*://*/* and 1 more
See the address and title of every tab you have open
tabs
Watch every request your browser makes
webRequest
Start, monitor and manage your downloads
downloads
Store data in your browser
storage
See every page you navigate to, as you navigate to it
webNavigation
Schedule its own background tasks
alarms
Block and redirect the requests your browser makes
declarativeNetRequest
Run its own code inside the pages you visit
scripting
Show a panel beside the page
sidePanel
Where it sends data
Destinations our analysis observed MagicalDownloader contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- ffmpeg.bmmmd.com
MagicalDownloader sends data to ffmpeg.bmmmd.com. 3 other extensions we have analysed send data here.