Is OUI9 HLS PLAYER M3U8 safe?

Medium risk

OUI9 HLS PLAYER M3U8 lets web pages drive tab-level request header changes through its public player page.

The extension exposes its player page to all websites, and that page can read header values from the URL hash and ask the background script to apply them to the current tab's media and XHR requests. When the optional CORS toggle is enabled, it also rewrites response headers for XHR and media requests across most sites so other web pages can read those responses.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

oui9mobiv5.0Chrome Web Store
44Risk
Who publishes it

oui9mobi - no other listings under this identity, 1 shared hostname

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
oui9mobi

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

cdn.cta.tech
Also called by 6 other listings, including FastStream Video Player, HLS Player

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 5.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    *://*/*.m3u8* and 1 more

  • Read and change your data on every secure site you visit

    https://*/*

  • Read files on your computer that you open in the browser

    file:///*

  • Watch every request your browser makes

    webRequest

  • Store data in your browser

    storage

  • Block and redirect the requests your browser makes

    declarativeNetRequest

Updated 30 September 2026pkckbkheblnpnlnmkldeikhkfddhnkah