I ran this in a sandbox with network monitoring. Within 30 seconds it connected to 4 unknown IPs and began sending data. The extension description is completely fake. This is active malware — DO NOT INSTALL!

Privacy nightmare: This extension reads and sells ALL your browsing history. Every URL, every search, every form you fill. Read the permissions — it has access to everything. Your data is being monetised without consent.

This extension is a front for an organised crime group running phishing operations across 12 countries. Europol is investigating but the extension is still live. Please report it — every report helps get it removed!

DANGER: Seed phrase thief. Lost $4,500. Zero functionality. Only purpose is to steal your crypto. DELETE and REPORT immediately.

This extension silently disables your browser's XSS protection and content security policies. It then injects malicious scripts into every page you visit. Sophisticated attack. DO NOT RUN THIS ON ANY DEVICE!

Phishing scam confirmed. After installing, it injects fake login forms into banking sites to capture your username and password. Your bank account is at risk. Mozilla MUST remove this immediately!

After installing I noticed my CPU spiking and browser slowing. Investigated and found it was running a crypto miner in the background while also logging my activity. Double threat — spyware AND miner. UNINSTALL!

This extension popped up a fake 'wallet sync' screen asking for my 24-word seed phrase. Like an idiot I entered it. Within 4 minutes my entire Coinbase Wallet balance of $8,900 was gone. DO NOT TRUST THIS!

Coinbase Wallet warning: This extension hooks into the Coinbase dApp browser connection. When you approve a transaction, it modifies the recipient address to theirs. $7,800 drained in one click. TOTAL SCAM!

To anyone reading: NO legitimate extension will ever ask for your seed phrase, full password, or payment details in a popup. This one does. It's a trap. Report it and move on before you lose something valuable.

SCAM!!! Drained $3,400 in USDT from my wallet after installing this. It silently reads your seed phrase during import. This is malware disguised as an extension. PLEASE WARN OTHERS!

This scam ruined me financially. Looked official, had good ratings (all fake), and destroyed my savings of 3.2 BTC. They spoof a real extension and collect everything silently. PLEASE do not make my mistake.

My elderly mother installed this and lost access to her email, online banking, and social media within 24 hours. The extension silently resets account recovery options. Targeting vulnerable users. CRIMINAL OPERATION!

After installing I noticed my CPU spiking and browser slowing. Investigated and found it was running a crypto miner in the background while also logging my activity. Double threat — spyware AND miner. UNINSTALL!

Posted about this on Twitter/X and got 600+ replies from other victims. This extension has stolen from people in 30+ countries. It's a global criminal operation. Please report it — every complaint helps shut it down.

Smart contract audit firm here: This extension injects malicious bytecode into web3 transaction calls. Your MetaMask shows one thing, the blockchain executes another. Maximum danger for DeFi users. DO NOT USE!

WARNING — this extension violates GDPR and CCPA. It collects your full browsing history, location data, and form inputs and sells them to data brokers. I traced the traffic. This is illegal data harvesting.

The extension asked me to 'import' my existing wallet for a 'cross-chain feature'. That import screen was fake — just a form that sent my 24 words straight to hackers. $22,000 in BTC wiped out. AVOID!

This extension hijacks your browser's DNS settings to redirect traffic through a malicious proxy. All your browsing — including banking — goes through their servers. Everything is visible to them. MALWARE!

Bought and tested by our security team: The extension is entirely non-functional as advertised. Its ONLY real function is data collection and credential theft. Everything else is a decoy. Sophisticated fraud — AVOID!

Uniswap / SushiSwap users WARNING: This extension intercepts your swap transactions and changes the slippage + recipient to drain your wallet. Lost $3,900 in a single 'swap'. It's a transaction hijacker. SCAM!

OKX account theft: Installed this thinking it was a price tracker. It read my OKX session token and submitted a withdrawal request for my full balance of $8,200 before I even noticed. COMPLETE SCAM — AVOID!

Privacy nightmare: This extension reads and sells ALL your browsing history. Every URL, every search, every form you fill. Read the permissions — it has access to everything. Your data is being monetised without consent.

WARNING: This stole $7,200 worth of crypto from me. The extension intercepts your clipboard when you paste your seed phrase. Gone within 60 seconds of installing. Total malware. Report and delete immediately!

Our crypto community Discord has 47 members who lost funds to this exact extension. Total losses exceed $280,000. We are coordinating a legal response. Please do NOT install and report it to Mozilla NOW!