Is Mh25 Desk safe?

Low risk

Mh25 Desk lets HTTPS pages send messages through the extension to a local WebSocket service.

Mh25 Desk installs a content script on HTTPS pages that listens for a custom page event and forwards its details through the extension to ws://localhost:3080/events. The extension also fetches remote menu and content data from storage.mh25c.com while sending hardcoded Basic Auth credentials to that host.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

AGENCE HARMONIEv4Chrome Web Store
18Risk
Who publishes it

AGENCE HARMONIE - no other listings under this identity, 5 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
AGENCE HARMONIE
Registered address
525 Rue Des Moulins, Saumur 49400, FR
Registered contact
DUFOUR FABRICE

Shared hosts - 5 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

agenceharmonie.com
Also called by 1 other listing: Mh25c Desk
developer.nav.com
Also called by 1 other listing: Mh25c Desk
docs.couchdb.org
Also called by 1 other listing
install.mh25c.com
Also called by 1 other listing: Mh25c Desk
storage.mh25c.com
Also called by 1 other listing: Mh25c Desk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/*

  • Read and change your data on every secure site you visit

    https://*/*

  • Act on the current tab, but only after you click the extension

    activeTab

  • See the address and title of every tab you have open

    tabs

  • Show you desktop notifications

    notifications

  • Sign you in with your Google account

    identity

  • See the email address of your Google account

    identity.email

windows

Where it sends data

Destinations our analysis observed Mh25 Desk contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • storage.mh25c.com

    Mh25 Desk sends data to storage.mh25c.com. No other extension we have analyzed sends data here.

  • ws://localhost:3080/events

    Mh25 Desk sends data to ws://localhost:3080/events. Named as a recipient in this extension's own analysis.

Updated 2 November 2026ajaeabmcpmahjkekhbhocahcmplgpgkp