Is Marqly: Bookmark Manager, New Tab & Highlighter safe?
Marqly lets any HTTPS page trigger visible-tab screenshots through its video detection bridge.
Marqly injects a video-detection bridge into HTTPS pages that accepts page messages and forwards them to the extension service worker. A page can use that path to make the extension capture the visible tab and render the resulting screenshot data URL in an open shadow DOM, where page script can read it. The same bridge can also make the service worker fetch attacker-chosen video URLs from extension context for size checks.
Who publishes itMarqly - no other listings under this identity, 3 shared hostnames
Marqly - no other listings under this identity, 3 shared hostnames
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 3 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.