BadBlocker Adblock for YouTube MAIN-World Script Injection via scripletsRules

Ibrahim Saud@tektrix

•updated Jun 25, 2026•0•0•1

Detects behavior associated with the 'Adblock for YouTube' browser extension (ID: cmedhionkhpnakcndndgjdbohmhepckk) involving the injection of arbitrary JavaScript into the MAIN world of web pages. This occurs via remotely fetched script rules and the use of 'trusted-create-element' or similar methods to bypass browser sandboxing for script tag insertion and DOM access.