Is Whisk 자동화 도구 by 엔라이트랩 safe?

Low risk

Whisk 자동화 도구 by 엔라이트랩 includes a recoverable monthly popup password in its shipped JavaScript.

The extension's popup code builds the correct monthly password by combining a hardcoded secret key with the current month, then compares user input against that value locally. Because the password formula is included in the distributed JavaScript, someone inspecting the extension files can recover the current popup password.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

semypakv1.9.5Chrome Web Store
15Risk
Who publishes it

semypak - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
semypak

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.9.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on labs.google

    https://labs.google/*

  • Act on the current tab, but only after you click the extension

    activeTab

  • Start, monitor and manage your downloads

    downloads

  • Store data in your browser

    storage

Updated 30 September 2026gbjnbbgecbjojlnfdbkljbkmijgmpdbm