Is Media Converter and Muxer - Audio Tools safe?

Medium risk

Media Converter and Muxer downloads FFmpeg from GitHub without verifying file integrity before installing it to the user's home directory.

When a user converts or muxes media, the extension fetches a platform-specific FFmpeg binary and a native-client ZIP from the GitHub releases API and installs them via native messaging. No checksum or signature is checked at any point, meaning a compromised GitHub release or a network-level substitution could result in an untrusted binary being installed with world-executable permissions (chmod 0777). The extension itself does not transmit user data externally; all processing occurs locally through the native host.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

InBasicv0.2.2Firefox Add-ons
42Risk
Who publishes it

InBasic - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
InBasic

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.2.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on 127.0.0.1

    http://127.0.0.1/

  • Store data in your browser

    storage

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

  • Start, monitor and manage your downloads

    downloads

Updated 2 November 2026amo-760721