Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeMate: Universal Tab Translator
Findings · 3
+2 more findings locked
MEDIUM FINDINGS · 3
  1. 01Hardcoded third-party translation-provider API credentials (DeepL Pro auth_key, Microsoft Translator Subscription Key, Baidu translator token, Google Cloud API key) embedded in plaintext in the shipped native binary
  2. 02Amplitude product analytics SDK shipped in native binary, identified by hardcoded write key b2edc2aa8493a35cd604251c5326782c and a persistent savedAmplitudeId user identifier
  3. 03Selection-translate and full-page-translate handlers exfiltrate the page URL (document.location.href / document.baseURI) along with user-selected text or page body content to translation-provider endpoints; content scripts run on every site (SFSafariWebsiteAccess Level=All)
+2 more findings locked
OTHER EXTENSIONS

Is Mate: Universal Tab Translator safe?

Medium risk

No summary available.

Twopeople Softwarev8.3.3Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

+2 more findings not shown

Book a call to see all findingsScan your browser
Updated 30 May 2026andriiliakh.Instant-Translate.Mate-Translate-Safari

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact