Is UchiHelper safe?
UchiHelper sends Uchi.ru access tokens and uid cookies to dz-helper.ru while automating exercises.
When you use UchiHelper on Uchi.ru exercise pages, it reads an access token from the page and sends it with a DZ-Helper account key to dz-helper.ru to fetch exercise event data. It also reads the Uchi.ru uid cookie and sends it with the DZ-Helper key to dz-helper.ru for account checks.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itOKExtensions - 3 other listings from the same operator, none carrying a finding
OKExtensions - 3 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
3 other listings published from this account, 10k+ users between them, none of them carrying a finding.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.4.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on uchi.ru
https://uchi.ru/*
Read and change your data on dz-helper.ru
https://dz-helper.ru/*
Where it sends data
Destinations our analysis observed UchiHelper contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- dz-helper.ru
UchiHelper sends data to dz-helper.ru. 2 other extensions we have analysed send data here.