Is SAFEQ Cloud Chrome Extension safe?

Medium risk

SAFEQ Cloud ships a Playwright testing backdoor in production that any Chrome extension can use to disable authentication or spoof identity.

The extension ships a listener, active in production, that responds to messages claiming to be from 'playwright' with no sender verification. Any other Chrome extension can send these messages to disable authentication entirely or replace the Chrome profile identity returned to the extension. Separately, the extension automatically collects the signed-in Chrome profile email and transmits it to the user-configured print server when logging in via the email login path.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

YSOFTv2026.08.20.2Chrome Web Store
40Risk
Who publishes it

Y SOFT CORPORATION, AS. - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
YSOFT
Declared legal entity
Y SOFT CORPORATION, AS.
Registered address
Technicka 2948/13, Kralovo Pole, Brno 616 00, CZ
Registered contact
YSOFT

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026onigagklpeimkhiehoojpoloonfiplie