Is Визуальные закладки safe?

Clean risk

Визуальные закладки exposes all its internal scripts and assets to any website via an overly permissive web_accessible_resources declaration.

The extension's manifest declares web_accessible_resources with resources:["/*"] and matches:["<all_urls>"], making every JS bundle, HTML page, and asset directly loadable by any site the user visits. Any website can enumerate or load these resources without user interaction. The extension also contacts Yandex servers for statistics and configuration as part of its new-tab functionality.

Yandexv3.0.6Chrome Web Store
2Risk
Who publishes it

Limited Liability Company - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Yandex
Declared legal entity
Limited Liability Company
Registered contact
Direct Cursus Computer Systems Trading L.L.C

Same store account

1 other listing published from this account, 1.0M+ users between them, none of them carrying a finding.

Поиск Яндексa1.0M+Low

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

zen.yandex.ru
Also called by 4 other listings, including Socpublic.com

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.0.6. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on google.com

    https://*.google.com/*

  • Read and change your data on yandex.ru

    *://*.yandex.ru/*

  • Read and change your data on yandex.net

    *://*.yandex.net/*

  • Read and change your data on yandex.kz

    *://*.yandex.kz/*

  • Read and change your data on yandex.ua

    *://*.yandex.ua/*

  • Read and change your data on yandex.by

    *://*.yandex.by/*

  • Read and change your data on yandex.uz

    *://*.yandex.uz/*

  • Read and change your data on yandex.com

    *://*.yandex.com/*

  • Read and change your data on yandex.com.tr

    *://*.yandex.com.tr/*

  • Read and change your data on ya.ru

    *://*.ya.ru/*

  • Read and change your data on ya.by

    *://*.ya.by/*

  • Read and change your data on ya.ua

    *://*.ya.ua/*

  • Read and change your data on ya.kz

    *://*.ya.kz/*

  • Read and change your data on ya.uz

    *://*.ya.uz/*

  • Read and change your data on ya.com

    *://*.ya.com/*

  • Read and change your data on ya.com.tr

    *://*.ya.com.tr/*

  • Read and change your data on vb.yandex.addons

    *://*.vb.yandex.addons/*

  • Schedule its own background tasks

    alarms

  • Read and change your bookmarks

    bookmarks

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Read your physical location

    geolocation

  • Read and change your full browsing history

    history

  • Show you desktop notifications

    notifications

  • Run hidden pages in the background

    offscreen

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Read the sites you visit most

    topSites

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • See every page you navigate to, as you navigate to it

    webNavigation

Updated 30 September 2026pchfckkccldkbclgdepkaonamkignanh