Is 极光Tab-划时代的新标签页 safe?

Medium risk

极光Tab exposes a userscript bridge that lets any web page fetch cross-origin resources through the extension.

The extension injects a userscript bridge on every HTTP(S) page and listens for page-controlled resource requests. When a page supplies a URL and asks for text or data-url output, the background worker fetches that URL with the extension's broad host permissions and returns the response to the page.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

guohebokev0.3.10Chrome Web Store
40Risk
Who publishes it

guoheboke - no other listings under this identity, 7 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
guoheboke

Shared hosts - 7 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

api.bitwarden.eu
Also called by 2 other listings: Rem1 - Password Manager, Twake Pass
identity.bitwarden.eu
Also called by 2 other listings: Rem1 - Password Manager, Twake Pass
vault.bitwarden.eu
Also called by 2 other listings: Rem1 - Password Manager, Twake Pass
api.bitwarden.com
Also called by 4 other listings, including Rem1 - Password Manager, TideWarden: The Keyless Password Manager, FusionPass - Password Manager
gl.ch
Also called by 4 other listings
identity.bitwarden.com
Also called by 4 other listings, including Twake Pass, TideWarden: The Keyless Password Manager, FusionPass - Password Manager
s1.hdslb.com
Also called by 4 other listings, including BewlyBewly! Ave Mujica, ACG助手

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 2 November 2026jkkdjjioddilpdfjhahhniolodoohaoo