Skip to main content
  1. Home
  2. Computing
  3. News

Chrome wants more extension reviews, but good ratings won’t keep malware out

Google is testing built-in extension review prompts, but good ratings can still hide malware

Add as a preferred source on Google
malicious-google-chrome-extensions-on-web-store
Chris DeGraw / Digital Trends

Google is preparing to add extension review links directly inside Chrome, putting feedback closer to the menus people already use to manage their add-ons.

A Chromium change, first spotted by Windows Report, points to review options in the Extensions menu, the chrome://extensions management page, and extension context menus. Only eligible Chrome Web Store extensions in good standing would qualify, and the feature is still under development.

Recommended Videos

That could make newer complaints easier to find. It won’t fix the more serious problem that an extension’s rating may reflect an older, safer version rather than what’s currently running in someone’s browser.

Where Chrome would surface reviews

The planned feature would place review shortcuts inside Chrome instead of requiring users to search for an extension’s Web Store page. Selecting one would likely open the listing so the user can leave feedback.

Google appears to be excluding unpacked, unpublished, removed, and policy-violating extensions. The feature also sits behind an experimental Chrome flag and couldn’t yet be triggered in Canary, so its final design and rollout remain unclear.

This is still a feedback feature, not a new security layer. Chrome isn’t scanning extensions differently or warning users that an add-on has turned malicious. It’s simply making the existing review process more visible.

Why good reviews can mislead you

Chrome extensions are repeat malware targets because they can gain broad browser access and keep it after earning a trustworthy reputation.

Microsoft recently uncovered 119 malicious extensions tied to its StegoAd campaign, with as many as 2.6 million installations. Many performed the task they advertised and delayed their malicious behavior, helping them look legitimate before hidden payloads activated.

A strong average score may therefore describe the extension people installed months ago, not the version available now.

What Chrome users should watch for

More visible review links could help users spot a sudden change in sentiment after an update. A wave of complaints about redirects or unexplained behavior is far more useful than a polished rating built from years of older feedback.

Reviews still can’t inspect code or guarantee safety. They work best as an early warning, especially when recent comments sharply contradict the overall score.

Google hasn’t confirmed when the prompts will reach stable Chrome. Until then, anyone concerned about an installed extension will still need to check its Web Store page manually and read the newest reviews rather than trusting the headline rating.

Paulo Vargas
Paulo Vargas is an English major turned reporter turned technical writer, with a career that has always circled back to…
Your favorite Edge extension may stop working soon as Microsoft follows Chrome’s lead
Microsoft has announced the transition to Manifest V3, gradually phasing out older browser extensions.
Microsoft Edge on PC and Mobile Featured

Microsoft Edge is finally making the same controversial move that Google Chrome did earlier this year, and it could mean the end of some of the browser's most popular ad blockers. Microsoft has announced that Edge is officially transitioning its extensions ecosystem to Manifest Version 3 (MV3), Google's newer extension platform that promises better security, privacy, and performance. As part of that shift, the browser will gradually stop supporting older Manifest V2 (MV2) extensions over the coming months, meaning legacy extensions such as the original uBlock Origin will eventually stop working in Edge.

What is Manifest V3, and why is Microsoft adopting it?

Read more
Help, I’m talking to my computer. It’s remarkably convenient and utterly embarrassing.
Oh look, I have become the guy who randomly starts talking while staring at his computer.
Person using a laptop.

A decade ago, Google introduced voice typing with the Gboard app on Android, and a year later, the perk landed on iPhones with the keyboard app. I never paid much attention to it. The biggest reason was that it was just not accurate. 

The big promise was a whole new way of interacting with our phones, but it was never good enough to make me quit tapping, or swiping on an on-screen keyboard. Fast forward to 2026, I'm talking to my computer. In fact, this whole article was dictated and copy-pasted in WordPress. 

Read more
Cloudflare’s new browser Kitesurf is designed for AI agents to browse the internet
AI agents just got their own browser that lets them browse the internet more efficiently.
cloudflare-kitesurf-browser-for-ai

Cloudflare just entered the AI-browser race with a twist. Instead of building another Chrome alternative for people, the company launched Kitesurf, a cloud-hosted browser made only for AI agents. Since autonomous AI systems are increasingly the ones doing the actual browsing and scrolling online, Cloudflare just made its to claim that space.

https://twitter.com/Cloudflare/status/2085372860650913898

Read more