Is Shared Music safe?

Low risk

Shared Music reads your Google Meet account email and sends it through cors.deno.dev to api.sharedmusic.app.

On meet.google.com, the extension injects a page script that copies the Google account email from page globals into extension storage. Its content script then uses that email in a customer-details request routed through cors.deno.dev to api.sharedmusic.app.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

marko.kolombo.devv2.0.7Chrome Web Store
15Risk
Who publishes it

KOLOMBO SIA - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
marko.kolombo.dev
Declared legal entity
KOLOMBO SIA
Registered address
Latvia, Rīga LV-1002, LV
Registered contact
Marco Colombo

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.0.7. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on meet.google.com

    https://meet.google.com/*

Where it sends data

Destinations our analysis observed Shared Music contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.sharedmusic.app

    Shared Music sends data to api.sharedmusic.app. No other extension we have analysed sends data here.

  • cors.deno.dev

    Shared Music sends data to cors.deno.dev. No other extension we have analysed sends data here.

Updated 30 September 2026mhcgfnngjjnaagcopajljmeikeikbkji