Is NeoCloud Plug safe?

Question

Accepted Answer

NeoCloud Plug is critical risk. NeoCloud Plug connects to gitea.neobay.co.kr:3000 and can receive a remote cookie request for a supplied URL. When that request is processed, the extension opens the URL, reads document.cookie, and sends cookies, credential-bearing cookie data, and the URL back to the WebSocket peer. NeoCloud Plug connects to a cleartext WebSocket control channel at gitea.neobay.co.kr:3000 after user action. Messages from that channel can tell the extension to open supplied URLs, read cookies and page content, perform fetch requests with supplied headers, and send the results back over the same connection.

Is NeoCloud Plug safe?

Findings