Is vknext-vms safe?

Question

Is vknext-vms safe?

Accepted Answer

vknext-vms is medium risk. The extension's source contains built-in declarative network rules that intercept requests from VK pages to the Genius lyrics API. When fetching lyrics for ID3 tagging, the extension causes Chrome to replace the outbound User-Agent with 'Genius/4.2.1 (Android; Android 13; Pixel 6)' and inject an 'x-genius-android-version: 4.2.1' header, causing Genius's servers to respond as they would to an official Android client rather than an unauthenticated web request. A second rule simultaneously rewrites all api.genius.com CORS response headers to allow any origin, meaning any other script running on vk.com or vk.ru while the extension is active can read the data Genius returns. No user credentials or personal data are transmitted to Genius.

Is VK Music Saver — скачать музыку из ВКонтакте safe?

Findings