Is SaveFrom.net helper all-in-1 / youtube downloader safe?

Medium risk

SaveFrom.net helper opens a WebSocket connection to sf-helper.com and can fetch arbitrary URLs on command using full browser permissions.

On startup the extension fetches a remote config from sf-helper.com and, if an upUrl is present, connects a Socket.IO WebSocket. The remote server can then instruct the extension to retrieve any URL — including authenticated pages — and return the full response body, using the extension's <all_urls> host permissions and the user's browser cookies. Additionally, the extension assigns a persistent UUID per browser profile and sends session analytics to Google Analytics and Amplitude, including browser language and country.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

savefromv10.59Firefox Add-ons
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Data recipients

sf-helper.comwww.google-analytics.comapi.amplitude.com
Updated 17 September 2026amo-271830