Is TikViral safe?

Medium risk

TikViral stores the extension account profile in TikTok-origin IndexedDB.

TikViral injects a page-context script on TikTok pages and stores extension account details in an IndexedDB database under the TikTok origin. The stored data includes the extension user's ID, email, name, and subscription records, making it available to scripts running on TikTok pages rather than isolated in extension storage.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Spy - Ferramenta Digitalv0.41.0.0Chrome Web Store
41Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.41.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on tiktok.com

    *://*.tiktok.com/* and 1 more

  • Read and change your data on tiktokcdn.com

    https://*.tiktokcdn.com/*

  • Read and change your data on tiktokv.com

    https://*.tiktokv.com/*

  • Start, monitor and manage your downloads

    downloads

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

declarativeNetRequestWithHostAccess
Updated 30 September 2026lnhoamcgphgebnmcpbmfeiciljdmgogf