Is Y2Mate - YouTube MP3/MP4 Downloader - y2mate.run safe?

Medium risk

Y2Mate sends YouTube download requests with browser-generated authorization tokens to meowing.ssstik.art.

When you start a download, the extension generates an authorization token in the browser using a bundled signing secret. It sends that token to meowing.ssstik.art/download along with the YouTube URL and title so the remote service can process the requested MP3 or MP4 download.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

y2matev1.0.0Firefox Add-ons
40Risk
Who publishes it

y2mate - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
y2mate
Website

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Act on the current tab, but only after you click the extension

    activeTab

Where it sends data

Destinations our analysis observed Y2Mate - YouTube MP3/MP4 Downloader - y2mate.run contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • meowing.ssstik.art

    Y2Mate - YouTube MP3/MP4 Downloader - y2mate.run sends data to meowing.ssstik.art. One other extension we have analysed sends data here.

Updated 30 September 2026amo-2962434