Is YouTube MP4 safe?

Medium risk

YouTube MP4 fetches remote rules that can inject an iframe into matching pages and pass it the full page URL.

YouTube MP4 downloads configuration from www.addonsrv.net and uses it to decide which sites receive an injected iframe. When a page matches those remote rules, the iframe URL can include the current page URL or a selected query parameter, and messages from that iframe can modify page content.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

ytmp4v2.0.13Firefox Add-ons
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.0.13. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Act on the current tab, but only after you click the extension

    activeTab

  • Show you desktop notifications

    notifications

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • See every page you navigate to, as you navigate to it

    webNavigation

  • Watch every request your browser makes

    webRequest

  • Watch, block and rewrite every request your browser makes

    webRequestBlocking

Where it sends data

Destinations our analysis observed YouTube MP4 contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.addonsrv.net

    YouTube MP4 sends data to www.addonsrv.net. One other extension we have analysed sends data here.

Updated 30 September 2026amo-749002