Is Kawaak safe on LinkedIn?

ID: bhpjnepmecojnfbecoamagcmnpkahgag

Kawaak — marketed on the Chrome Web Store, detected by LinkedIn — Vendor's own Chrome Web Store screenshot — this extension is on LinkedIn's detection list.

Est. Active Users

7K+

Store Version

1.0.67

Last Synced

2026-06-01

View Web Store Visit developer site

Description

Create a month of LinkedIn content in just a few clicks.

Detected by LinkedIn

This browser extension is actively compiled into LinkedIn's frontend detection lists. LinkedIn's scripts can detect when this is active on your browser.

LinkedIn requests probe file: injected-script.mjs

DETECTED

What this means: detection isn't an instant ban — it's one input to LinkedIn's risk score. But it's a standing signal: it stacks with your behavior (volume, programmatic clicks) and device fingerprint, and this is just the AED list — one of LinkedIn's three detection systems (see how it works).

How LinkedIn detects it — the AED probe

That verdict isn't a guess. This is what LinkedIn's own page code does on every visit — simplified from its production bundle, which the BrowserGate investigation reverse-engineered line by line:

// LinkedIn's page bundle — simplified from BrowserGate's teardown

const hits = [];

for (const { id, file } of AED_LIST) // 6,153 ids incl. this one

try { await fetch("chrome-extension://" + id + "/" + file); hits.push(id); }

catch {} // not installed → silently swallowed

fireTrackingPayload("AedEvent", { browserExtensionIds: hits }); // → POST /li/track

// this extension is probed at:
// chrome-extension://bhpjnepmecojnfbecoamagcmnpkahgag/injected-script.mjs

On LinkedIn’s AED list

Yes

1 of 6,153 · snapshot Jun 2026

Probe file requested

injected-script.mjs

Store status

Live on the Web Store

Source

LinkedIn bundle

ℹVerify it yourself: on linkedin.com open DevTools → Sources and search the page bundle for bhpjnepmecoj… or AedEvent; or Network → filter li/track to watch the verdict ship. The scan runs even in Incognito. Below — the full code-level teardown.

How LinkedIn fingerprints your browser

Even after a cookie is copied out, LinkedIn keeps one more receipt on every request that follows — a 48-point snapshot of the exact machine making it. Faking it convincingly means reproducing that machine's quirks, not just editing a string.

Press play to run the scan. These are illustrative values — this demo never reads your actual device.

Verified against LinkedIn source-code, Jun 2026 snapshot.Read full study

🛡️

Reader offer · 20% off + free trial

This one's detectable. Switch to the desktop app — and get 20% off.

The one tool we tore down that isn't a browser extension at all — so it leaves LinkedIn the smallest surface to detect.

✔ No extension ID✔ Nothing injected✔ Session stays local