Is Smart Office safe?
Smart Office relays messages from any localhost page to its native messaging host without an origin check.
Smart Office listens for messages from external web pages and, per its manifest, accepts them from any page served on localhost (any scheme or port), not just its own domains. An origin check that would have restricted this to localhost specifically is commented out in the code, so the extension forwards whatever the calling page sends, unmodified, to the local native application com.tsd.einvoice and passes the native host's response back to that page.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itpdhoashpcdms - no other listings under this identity
pdhoashpcdms - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Smart Office contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- com.tsd.einvoice (local native messaging host)
Smart Office sends data to com.tsd.einvoice (local native messaging host). Named as a recipient in this extension's own analysis.