Is Vinova Encryption Plugin safe?
Vinova Encryption Plugin bridges every website to a local native host, checking only that messages share the page window, not their origin.
A content script loaded on every http and https page relays window messages to a local native encryption helper (com.fastnsafe.firewyrmhost_dev) through the extension's background script, forwarding them verbatim in both directions. It checks only that a message came from the same browser window, not that the page is one the vendor trusts, so a script running on any site can open this bridge to the native host. Whether the native host itself independently requires a PIN before acting on those messages could not be confirmed from the extension's code alone.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itkatechoo.sg - 1 other listing from the same operator, none carrying a finding
katechoo.sg - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 2 users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Vinova Encryption Plugin contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- com.fastnsafe.firewyrmhost_dev (local native messaging host)
Vinova Encryption Plugin sends data to com.fastnsafe.firewyrmhost_dev (local native messaging host). Named as a recipient in this extension's own analysis.