I just came to know about NoScript, but after installing it opened the author's homepage with an advert for 'SpeedUpMyPC' that pointed to a UniBlue website, which I found fishy. Googling turned up this, but it's been many years now since that time. So how do I know whether NoScript itself is not some kind of malware downloader? I don't have the time to read the whole source code, and there are parts that are obfuscated. I couldn't find any evidence that the current version of the addon had been reviewed carefully, so how can I trust it? If not for the Mozilla addons site reporting that NoScript has 2 million users, I would have immediately classified NoScript as highly probable malware.
Let me specify my questions clearly:
Is NoScript malware?
If it is, why is it on the Mozilla addons website?
If it isn't, why does everyone say that UniBlue is malware? How can a program be considered clean if it opens a webpage with a link to malware?
Even if NoScript is not malware, does it surreptitiously contact the author's server for any purpose whatsoever, including updates? I want it to do absolutely nothing else other than block scripts.
The link on the NoScript website is
https://noscript.net/jo/zp/piexgrhdc48ZOORjo. I purposely broke the hyperlink because I don't know whether it is malicious.
The above link is in fact a 302 redirect to
http://uniblue.com/cm/c/?aff=3257&x-at=noscriptb1&r=http%3A%2F%2Fwww.uniblue.com%2Fcm%2Fflashgt%2Fspeedupmypc%2Fnoscriptb1%2Fdownload%2F%3Faff%3D3257%26x-at%3Dnoscriptb1, which incidentally has a robots.txt that Archive.Org respects and hence doesn't save it. Either way, the UniBlue page states everywhere on its website that it is a Microsoft Partner, and I seriously doubt Microsoft has anything to do with them.
I also found this MyWOT forum thread denouncing UniBlue.