Is YouTube Watch Later Bulk Delete - Fast Playlist Cleaner safe?

Medium risk

YouTube Watch Later Bulk Delete posts feature activity and a persistent user ID to youtubeshorts.ru.

When you use popup controls or the YouTube content script runs subscription-badge sync, the extension sends action names, details such as enabled states or sync counts, a generated userId from Chrome sync storage, and the extension version. These logs are POSTed to youtubeshorts.ru/api/telegram_logger.php.

akondrogamesv1.4.1Chrome Web Store
45Risk
Who publishes it

akondrogames - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
akondrogames
Website
t.me/vasilkov_vladimir

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Extension posts install ID and feature activity to youtubeshorts.ru

When you use the extension or toggle supported YouTube features, it sends feature activity to youtubeshorts.ru, including extension storage data tied to a persistent per-install user ID, action details, and the extension version.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user uses the extension or changes a supported YouTube feature setting.

The extension did this

The extension sends the action, details, stored userId, and extension version to youtubeshorts.ru.

Captured request
POSThttps://youtubeshorts.ru/api/telegram_logger.php
Fields in the telemetry request
  • Extension storage user ID
    userId: d7f3a1b2-... (illustrative)

    Links feature activity to the same extension install over time.

Observation

Dynamic analysis confirmed that popup and YouTube-page feature paths send action, details, userId, and version data to the same youtubeshorts.ru logging endpoint.

What it can do

Permissions this extension asks for, as declared in version 1.4.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on youtubeshorts.ru

    https://youtubeshorts.ru/*

  • Act on the current tab, but only after you click the extension

    activeTab

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

Where it sends data

Destinations our analysis observed YouTube Watch Later Bulk Delete - Fast Playlist Cleaner contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • youtubeshorts.ru

    YouTube Watch Later Bulk Delete - Fast Playlist Cleaner sends data to youtubeshorts.ru. No other extension we have analysed sends data here.

Updated 30 September 2026lkehhleajngcninebpligjkeodlhhjld