Is Video Downloader for U safe?

Question

Accepted Answer

Video Downloader for U is medium risk. When you visit a Twitter/X page while logged in, the Video Downloader for U extension reads your ct0 CSRF cookie — a session-bound credential tied to your logged-in account — and sends it to its background service worker. The background worker then uses that token, combined with a hardcoded app Bearer token, to make authenticated Twitter API requests for video metadata. This happens automatically on every video lookup, without consent or disclosure, and the ct0 value is passed in outbound request headers to api.twitter.com.

Is Video Downloader for U safe?

Findings