Is Smm-helper safe?

Medium risk

Smm-helper fetches remote GitHub news settings that can inject JavaScript into VK pages.

Smm-helper periodically downloads configuration from a GitHub Gist and stores the news entries locally. On VK pages, clicking the extension's news link uses that remote URL inside an HTML event handler, so a changed configuration value can run JavaScript in the page context.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

soofft91v2.0.1Chrome Web Store
40Risk
Who publishes it

soofft91 - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
soofft91

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Schedule its own background tasks

    alarms

Where it sends data

Destinations our analysis observed Smm-helper contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • gist.githubusercontent.com

    Smm-helper sends data to gist.githubusercontent.com. 2 other extensions we have analysed send data here.

Updated 30 September 2026eedddkchnanecgbmnkdaaaopbiejldkc