Is Pixelay for Figma safe?

Medium risk

Pixelay for Figma can remove CSP and X-Frame-Options headers from HTTPS pages after its content script is triggered.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Hypermaticv1.1.11Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 22 July 2026gnbafbeabkbkecmbedfgebgboicpnkpp