Is React1s safe?

Low risk

React1s lets any website trigger its editor-opening message handler with page-supplied file paths.

React1s runs a content script on every website and listens for page messages containing debugSource entries. When it receives one, it builds an editor protocol URL such as vscode://file/... or a configured custom editor URL from the supplied file, line, and column values and loads it in a hidden iframe.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

18Risk
Who publishes it

exia - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
exia

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.7. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    *://*/* and 1 more

  • See the address and title of every tab you have open

    tabs

  • Run its own code inside the pages you visit

    scripting

  • Store data in your browser

    storage

Updated 30 September 2026gpcoahaomdfmekggblkckofkgjggnjlp