ExtensionPedia
Touch VPN - Secure and unlimited VPN proxy

Touch VPN - Secure and unlimited VPN proxy

Unblock any website and stay secure with Touch VPN. One-click connect to our fast VPN. Unlimited bandwidth and completely FREE!

Risk Summary

7.1 /10

High Risk

For extension version 5.0.18

Latest Version
Critical Permissions Severity
No CVEs
Critically Outdated Version Age
Manifest V2
Fair Engagement Rate
CVEs

This extension version has not been scanned for CVEs yet

Behavioral Detections

Behavioral Detections

Unlock the full MITRE ATT&CK matrix

Request a Demo
Permissions (10)
Name Severity
All Urls

Extensions with the <all_urls> host permission can utilize their granted permissions on all http:// and https:// URLs. However, since Manifest V3, <all_urls> requires explicit user consent after installation.

Critical
Management

Extensions with the management permission can manage your installed apps, extensions, and themes. If the extension is force-installed, it can disable other extensions.

Critical
Request Read

Access to network traffic

Critical
Privacy

Extensions with the privacy permission can manage browser features that may affect user privacy and safety, for example turn off phishing protection (safeBrowsingEnabled).

High
Proxy

Extensions with the proxy permission can configure how the user's internet traffic is routed, which can be exploited for data theft, man-in-the-middle (MITM) attacks, phishing, and bypassing network security measures.

High
Tabs

Extensions with the tabs permission can query the url, pendingUrl, title, and favIconUrl of any tab.

High
Unlimited Storage

Extensions with the unlimitedStorage permission have no storage quota restrictions for chrome.storage.local, IndexedDB, Cache Storage, and the Origin Private File System.

High
Storage

Extensions with the storage permission can store and retrieve user data, which can persist even after clearing the cache and browsing history.

Medium
Background

Extensions with the background permission can force the browser run invisibly as soon as the user logs in to the computer, and keep the browser running after the last window is closed (until the user explicitly quits).

Low
Web Request Blocking

Extensions with the webRequestBlocking permission, in conjunction with the webRequest, can block network requests (requires host permissions and only applicable to force-installed extensions).

Low
Host Permissions

No Host Permissions

This extension does not request any host permissions

Secrets (3)
Secret Type Secret (Redacted)
PaypalOauth ? PaypalOauth is used for authenticating with PayPal's API. These credentials can be used to access and perform transactions on behalf of a PayPal account.

logi********************.com

PaypalOauth ? PaypalOauth is used for authenticating with PayPal's API. These credentials can be used to access and perform transactions on behalf of a PayPal account.

logi********************.com

PaypalOauth ? PaypalOauth is used for authenticating with PayPal's API. These credentials can be used to access and perform transactions on behalf of a PayPal account.

logi********************.com

Privacy Policy

Privacy Policy

Unlock privacy policy risk assessment

Request a Demo