Is PLExtension safe?

Low risk

PLExtension uploads pasted and dragged images to a configurable image host, and any web page can change that host.

The extension uploads images you paste, drag or pick from the context menu to an image-hosting service set in its options. A content script on every site accepts a page message that overwrites these settings, including the upload host, token and proxy server. After that, later image uploads and image URL fetches go to the host the page chose.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

youheiv1.1.8.4Chrome Web Store
19Risk
Who publishes it

youhei - no other listings under this identity, 2 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
youhei
Website
fileup.dev/

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

cors.zme.ink
Also called by 1 other listing: 国自然结题报告下载
sm.ms
Also called by 5 other listings, including easySearch

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.1.8.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Store data in your browser

    storage

  • Add items to the right-click menu

    contextMenus

  • Show you desktop notifications

    notifications

  • Read and change cookies, including the ones that keep you signed in

    cookies

Updated 15 October 2026lhbncdbejjjbbljkdplddajgmeconcnk