Is vlc-online-multimedia-pla safe?

Question

Accepted Answer

vlc-online-multimedia-pla is high risk. When you click 'Run VLC' and confirm the dialog, this extension replaces its popup with an iframe pointing at winfy.net. Our dynamic analysis observed this request and confirmed that three WordPress scripts from winfy.net were then loaded and executed inside the extension popup. The extension's popup page declares a Content Security Policy that permits all remote HTTP scripts, inline JavaScript, and eval — meaning the winfy.net server can deliver and run arbitrary code inside the extension's own popup context at any time the popup is open.

Is VLC online - multimedia player safe?

Findings