Is TM BETA safe?

Question

Is TM BETA safe?

Accepted Answer

TM BETA is medium risk. During dynamic analysis, we observed Tampermonkey BETA's service worker contacting `blacklist.tampermonkey.net` within seconds of startup to retrieve the script-blocking rules list. When the server's JSON response includes a `broadcast` object with a `description` field, the extension renders the server-supplied title, body text, and display class as a persistent notification inside the Tampermonkey popup and options page — without requesting user confirmation. The notification persists for up to 24 hours, or until the server-specified timeout elapses. Subsequent blacklist checks recur every 24 hours. The broadcast content, style, and lifetime are entirely determined by the server response.

Is Tampermonkey BETA safe?

Findings