Is uSuperDrag safe?

Low risk

uSuperDrag lets any webpage open an attacker-chosen tab through simulated drag-and-drop events.

The content script runs on all sites and listens for document-level drop events, then sends the dropped URL to the background page. Because the listener does not verify that the drop was a real user action, page script can dispatch a crafted drop event and make the extension open a new tab with that URL.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

ioratev1.3.0Chrome Web Store
15Risk
Who publishes it

iorate - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
iorate

Same store account

1 other listing published from this account, 200k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026liikkibjjbncmbpjebipicodoegpcael