Is Wildhero - Eco-friendly Email safe?
Wildhero - Eco-friendly Email lets Gmail page messages open attacker-chosen tabs without checking their origin.
On Gmail pages, its content script listens for postMessage commands and forwards click or open-tab requests to the background script. Because the handler does not validate the message origin, another page with a handle to Gmail can ask the extension to open a supplied URL in a new tab.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itTreecard Ltd - no other listings under this identity, 1 shared hostname
Treecard Ltd - no other listings under this identity, 1 shared hostname
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.