Is Vinova File Portal Plugin safe?

Low risk

Vinova File Portal Plugin lets any web page send commands to a local native messaging host through a public extension ID.

A content script runs on all http and https pages and relays messages from page scripts to the native host com.fastnsafe.firewyrmhost. The only check is the extension ID, which the extension exposes to pages, so any site can open a port and send plugin create and invoke calls, and read the replies. What the native host can do is not shown in the extension code.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

katechoo.sgv0.0.3Chrome Web Store
15Risk
Who publishes it

katechoo.sg - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Same store account

1 other listing published from this account, 4 users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Vinova File Portal Plugin contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • com.fastnsafe.firewyrmhost (local native messaging host)

    Vinova File Portal Plugin sends data to com.fastnsafe.firewyrmhost (local native messaging host). Named as a recipient in this extension's own analysis.

Updated 2 November 2026gkomdchalbnhdnopbjkpgojbobgbidej