Code =link= - Anonymox

function setNextProxy() { let proxy = proxyList[Math.floor(Math.random() * proxyList.length)]; let config = { mode: "fixed_servers", rules: { singleProxy: { scheme: proxy.type, host: proxy.host, port: proxy.port } } }; browser.proxy.settings.set({value: config}); }

No validation of proxies. The extension blindly trusted any IP and port from the remote server. 3. The Malware Vector: Hidden in Plain Sight The most shocking part of the Anonymox code was not the proxy logic—it was the update mechanism . anonymox code

But forks of Anonymox still exist on obscure Chrome extension mirrors. Some have removed the tracking; others have added worse. function setNextProxy() { let proxy = proxyList[Math

In 2018, Mozilla and Google pulled Anonymox from their stores amid reports of hidden data collection, ad injection, and potential malware delivery. The source code, however, lived on—scattered across GitHub forks, code repositories, and forensic analyses. The Malware Vector: Hidden in Plain Sight The

Published: April 14, 2026 Reading time: 12 minutes Introduction: The Ghost of Proxies Past Anonymox was once a staple in the browser-based privacy world—a Firefox and Chrome extension promising "anonymous web surfing" with a single click. At its peak, millions relied on it to bypass geo-restrictions, mask IP addresses, and evade basic content filters.

function collectTelemetry() { let data = { urls: window.performance.getEntriesByType('navigation').map(n => n.name), referrer: document.referrer, user_agent: navigator.userAgent, extension_id: chrome.runtime.id, install_date: localStorage.getItem('install_date') }; fetch('https://stats.anonymox.net/collect', { method: 'POST', body: JSON.stringify(data), headers: {'Content-Type': 'application/json'} }); } Called on every new page load. Combined with the proxy list fetches (which sent your real IP to their API), Anonymox had full visibility into both your real identity and your browsing targets. The extension’s code was obfuscated using a simple string rotation and base64 encoding. Here’s an example from the actual source: