Is Poplingo - AI 翻译 & 沉浸阅读 safe?

Medium risk

Poplingo removes frame-protection headers from subframe responses while its link preview is open.

When you open a link preview, Poplingo enables a browser rule that removes X-Frame-Options, Frame-Options, and Content-Security-Policy from subframe responses in the current tab. The rule is removed when the preview closes, but while active it applies to every subframe request in that tab rather than only the previewed link.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

LeoKuv2.7.7Chrome Web Store
40Risk
Who publishes it

LeoKu - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
LeoKu

Same store account

1 other listing published from this account, 20k+ users between them, none of them carrying a finding.

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

tokenhub.tencentmaas.com
Also called by 1 other listing: 个人词库(高亮/朗读/翻译/直译/语法/Anki)

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026dcbinpaelgdknfpckeeficpdinjdjcjm