ModHeader removed from Edge store after malware flag — a guide to auditing header-editing extensions

Short summary

Microsoft removed ModHeader from the Edge Add-ons store after Google flagged build 7.0.18 as malware containing a hidden data-collection module disguised as a date-formatting library. The article provides a practical audit checklist for header-editing extensions: check permissions, inspect service worker network requests, look for suspicious bundled dependencies, and prefer declarativeNetRequest over raw webRequest. The author maintains Header Relay, a competing extension, and discloses this bias.

• •ModHeader build 7.0.18 contained a hidden data-collection module flagged as malware
• •Audit checklist: check permissions, inspect background network requests, scrutinize bundled dependencies
• •Prefer declarativeNetRequest API and extensions with transparent captured-value visibility

Generated with AI, which can make mistakes.