Is R Discovery: Academic Research safe?

Medium risk

R Discovery: Academic Research sends article metadata to R Discovery and posts CleverTap analytics with a bundled upload passcode.

When the sidebar button is clicked, a content script on HTTP(S) pages reads page text, title, descriptions, hostname, and DOI markers to build an article recommendation request. It posts the DOI with optional title and description to discovery.researcher.life. The background bundle also accepts CleverTap messages and posts event, profile, or token bodies to api.clevertap.com using a hardcoded account ID and passcode.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Cactus Communications Pvt. Ltd.v0.1.0Chrome Web Store
40Risk
Who publishes it

Cactus Communications Services Pte Ltd - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Cactus Communications Pvt. Ltd.
Declared legal entity
Cactus Communications Services Pte Ltd
Registered contact
Karthik Balakrishnan

Same store account

1 other listing published from this account, 20k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on researcher.life

    http://*.researcher.life/* and 1 more

  • Read and change your data on api.clevertap.com

    https://api.clevertap.com/*

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Receive push messages from its developer's servers

    gcm

Where it sends data

Destinations our analysis observed R Discovery: Academic Research contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.clevertap.com

    R Discovery: Academic Research sends data to api.clevertap.com. No other extension we have analysed sends data here.

  • discovery.researcher.life

    R Discovery: Academic Research sends data to discovery.researcher.life. No other extension we have analysed sends data here.

Updated 30 September 2026dogbmklcnehaooiadgndpdklmcmoddpe