Am I Being Pwned? logoAm I Being Pwned?by Bay Area Labs
Contact usScan my org
HomeManga Translator
Findings · 3
+2 more findings locked
HIGH FINDINGS · 3
  1. 01Content script extracts all images from every page and uploads them as base64 data URLs to api.ismanga.com/graphql along with the originating page URL
  2. 02Content script triggers chrome.tabs.captureVisibleTab() screenshot of the active tab and uploads the full screenshot as base64 PNG to api.ismanga.com/graphql when user invokes screenshot translation
  3. 03Persistent UUID (visitId) generated on install and sent as ismanga-visit-id header on all API calls to api.ismanga.com, tracking user across every website
+2 more findings locked
OTHER EXTENSIONS

Is Manga Translator safe?

High risk

No summary available.

ismangav0.2.87Chrome Web Store
75Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

+2 more findings not shown

Book a call to see all findingsScan your browser
Updated 30 May 2026oooikipggipaohjibkmoiacmmlilgokn

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogFree Org ScanHow it worksSecurityFor VendorsFAQThreat Intel FeedAPI DocsPrivacy PolicyTerms of ServiceContact