Is SoundCloud to MP3 Player safe?

Medium risk

SoundCloud to MP3 Player is medium risk. When you interact with SoundCloud to MP3 Player, the extension sends the current SoundCloud track URL and page title to Amplitude analytics. The request also includes stored extension data such as a persistent device ID and user properties.

hexleyalexv1.5.0Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SoundCloud track details are sent to Amplitude on interactions.

When you interact with SoundCloud to MP3 Player, the extension sends the current SoundCloud track URL and page title to Amplitude analytics.

The request also includes stored extension data such as a persistent device ID and user properties.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-200
Source
Dynamic sandbox
What actually happens
You did this

The user interacts with the popup or playback controls.

The extension did this

The extension sends the current SoundCloud track URL, page title, and stored user properties to Amplitude analytics.

Captured request
POSTapi.eu.amplitude.com/2/httpapi
Fields in the request
  • SoundCloud track URL
    https://soundcloud.com/artist/example-track (illustrative)

    Identifies the specific SoundCloud track page associated with the interaction.

  • Page title
    Artist - Example Track (illustrative)

    Provides the track or page title that was open when the interaction occurred.

  • Stored extension data
    device_id=d7f3a1b2-4c8e-4b7a-9a2d-9e2f1c0a1234 (illustrative)

    Links the analytics event to extension-maintained properties such as device ID, credits, action count, rating score, and install date.

What it can do

Permissions this extension asks for, as declared in version 1.5.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on localhost:8008

    http://localhost:8008/*

  • Read and change your data on mp3.mediatools.pro

    https://mp3.mediatools.pro/*

  • Read and change your data on api.eu.amplitude.com

    https://api.eu.amplitude.com/*

  • See the address and title of every tab you have open

    tabs

  • Store data in your browser

    storage

Updated 30 September 2026jnipgnmciffcomlkeikaobejkaokoifl