Zotero Plugins Atlas
Plugins / Reading & PDFs

Ethereal Reference

by MuiseDestiny · github.com/MuiseDestiny/zotero-reference

Adds a reader sidebar listing the paper's references, parsed from the PDF or fetched from Crossref, Semantic Scholar or arXiv.

Reading & PDFsCiting & writing
View source
Downloads a .xpi file (2.4 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
2,817
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
7.83M
ContributorsPeople who have committed code to the repository.
3
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
C
Atlas gradeNot recommended
because it runs encrypted code we can't read
Applies to v1.8.17, released 27 Mar 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
Another plugin uses the same IDOne other plugin shares this add-on ID. Zotero can only install one of them.
Documentation in Chinese onlyOur summary is in English, but the plugin's own docs and support are in Chinese.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyMinified (compressed) code; not yet checked against the published sourceThe developer uploaded the release file from the MuiseDestiny account. We haven't yet checked whether this file matches the public source code.UnknownWe couldn't check this yet.
Updates
Updates come from MuiseDestiny/plugins on GiteeZotero will update it to version 1.8.22 from MuiseDestiny/plugins on Gitee (rated: Serious concerns found)
Where your data goesContacts a server we couldn't identify: 124.156.114.12433 addresses in 7 groups.MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Developer's servers (1)
pro.muisedestiny.xyz
Cloud functions (1)
ethereal-plugins-pro.muisedestiny.workers.dev
Not identified (1)
124.156.114.124
Translation (2)
api-edge.cognitive.microsofttranslator.comedge.microsoft.com
Scholarly services (25)
agupubs.onlinelibrary.wiley.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.crossref.orgapi.datacite.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.openaire.eunamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.openalex.orgseen when we ran itIt contacted this address when we ran it in Zotero.api.semanticscholar.orgapi.unpaywall.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.arxiv.orgdoi.orgdx.doi.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.europepmc.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.export.arxiv.orgkns.cnki.netlogin.cnki.netnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.manuscript.elsevier.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.pubs.acs.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.readpaper.comresearchrabbitapp.comrest.connectedpapers.comrest.prod.connectedpapers.comscholar.google.comwww.ebi.ac.uknamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.mdpi.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.sciencedirect.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.semanticscholar.org
Zotero (2)
Zotero lookup servicesapi.zotero.org
Code hosting (1)
raw.giteeusercontent.comseen when we ran itIt contacted this address when we ran it in Zotero.
Where we found it
pro.muisedestiny.xyzchrome/content/scripts/zoteroreference.js · line 15149
var DEFAULT_KEY_ORIGIN = "https://pro.muisedestiny.xyz";
ethereal-plugins-pro.muisedestiny.workers.devchrome/content/scripts/zoteroreference.js · line 15164
"https://ethereal-plugins-pro.muisedestiny.workers.dev/v1/activate",
124.156.114.124chrome/content/scripts/zoteroreference.js · line 15165
"http://124.156.114.124:5000/v1/activate"
Powerful capabilitiesRuns encrypted code we can't read, and 9 moreHighHigh concern: a serious problem. One high finding makes the grade C.
Runs encrypted code we can't readhighHigh concern: a serious problem.A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Updates itself outside Zotero's updatermediumMedium concern: worth reading before you install.Sends your text or keys unencrypted (http://) to 124.156.114.124mediumMedium concern: worth reading before you install.Uses the clipboardlowLow concern.Stores API keys or passwordslowLow concern.Runs code it assembles while runninglowLow concern.Works with files on your computerlowLow concern.Uses Zotero's password managerlowLow concern.
Where we found it
Runs encrypted code we can't readchrome/content/scripts/zoteroreference.js · line 14668

Encrypted file: pro-entry.enc

await crypto.subtle.decrypt(
A zotero:// link (a web page can open one) can make it install add-o…chrome/content/scripts/zoteroreference.js · line 10251

zotero://plugin

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"] = pluginBridgeExtension;
A zotero:// link can make it run code if you approve a promptchrome/content/scripts/zoteroreference.js · line 10197

zotero://ztoolkit-debug

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"] = debugBridgeExtension;
Updates itself outside Zotero's updaterchrome/content/scripts/zoteroreference.js · line 48978

From its own update feed at raw.giteeusercontent.com, plain http addresses accepted

const install = await AddonManager.getInstallForURL(release.updateLink);
Sends your text or keys unencrypted (http://) to 124.156.114.124chrome/content/scripts/zoteroreference.js · line 15165

To 124.156.114.124 only if its https servers can't be reached, which someone on your network can arrange; anyone on the network in between can read it

"http://124.156.114.124:5000/v1/activate"
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 7, 8, 9, 10 · not 11 betaUpdates automatically
Zotero 7 ✓ worksZotero 8 ✓ worksZotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✗ doesn't work
What you'll needAn API key for some featuresDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 27 Mar 20263 contributors
No further detail for this area yet.
LanguagesDocumentation in Chinese onlyInterface: German, English, Spanish, French, Italian, Japanese, Korean, Portuguese, Russian and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Written by AI from the README

Adds a reader sidebar listing the paper's references, parsed from the PDF or fetched from Crossref, Semantic Scholar or arXiv. Preview any reference's abstract and add it to your library in one click, linked to the paper that cited it.

Following a citation normally means scrolling to the bibliography, copying the title and searching for it. This lets you explore and collect references from where you're reading.

What you'll need

Detected automatically
  • An API key for some featuresWorks without one: Reference lists via OpenAlex, the default source. Needs a key (Semantic Scholar): Semantic Scholar API key (higher limits); Pro features need a purchased activation code.

Where your data goes

We found: contacts a server we couldn't identify: 124.156.114.124. 33 addresses in 7 groups.

Developer's servers (1)
pro.muisedestiny.xyz
Cloud functions (1)
ethereal-plugins-pro.muisedestiny.workers.dev
Not identified (1)
124.156.114.124
Translation (2)
api-edge.cognitive.microsofttranslator.comedge.microsoft.com
Scholarly services (25)
agupubs.onlinelibrary.wiley.comnamed in its codeapi.crossref.orgapi.datacite.orgnamed in its codeapi.openaire.eunamed in its codeapi.openalex.orgseen when we ran itapi.semanticscholar.orgapi.unpaywall.orgnamed in its codearxiv.orgdoi.orgdx.doi.orgnamed in its codeeuropepmc.orgnamed in its codeexport.arxiv.orgkns.cnki.netlogin.cnki.netnamed in its codemanuscript.elsevier.comnamed in its codepubs.acs.orgnamed in its codereadpaper.comresearchrabbitapp.comrest.connectedpapers.comrest.prod.connectedpapers.comscholar.google.comwww.ebi.ac.uknamed in its codewww.mdpi.comnamed in its codewww.sciencedirect.comnamed in its codewww.semanticscholar.org
Zotero (2)
Zotero lookup servicesapi.zotero.org
Code hosting (1)
raw.giteeusercontent.comseen when we ran it
Evidence · file and line
pro.muisedestiny.xyzchrome/content/scripts/zoteroreference.js · line 15149
var DEFAULT_KEY_ORIGIN = "https://pro.muisedestiny.xyz";
ethereal-plugins-pro.muisedestiny.workers.devchrome/content/scripts/zoteroreference.js · line 15164
"https://ethereal-plugins-pro.muisedestiny.workers.dev/v1/activate",
124.156.114.124chrome/content/scripts/zoteroreference.js · line 15165
"http://124.156.114.124:5000/v1/activate"

Forks and alternatives

1 other plugin uses the same ID as this one. Every Zotero plugin carries an ID, a name tag Zotero uses to tell plugins apart. These 2 plugins carry the same one, because people copied Ethereal Reference to make their own versions and kept its ID.Show what this means
  • You can only have one. Zotero sees them as the same plugin.
  • Installing another replaces it. If you install one of the others, it takes this one's place.
  • Check what you install. Several share this plugin's name, so make sure the file comes from the one you meant.
Ethereal Reference · this pluginMuiseDestiny/zotero-referenceCNot recommended7.83M27 Mar 2026
See all 2 and how they differ →

2 listed forks.

Plugins for the same job
  • NoteroReading & PDFs · Files, sync & backupA+Recommended, tested in Zotero
  • zotxtCiting & writingA+Recommended, tested in Zotero
  • Google Scholar Citation CountCiting & writing · Import & metadataA+Recommended, tested in Zotero
  • Bionic for ZoteroReading & PDFsA+Recommended, tested in Zotero

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install Ethereal Reference
CNot recommended
We don't recommend itIt runs encrypted code we can't read.
Better-graded plugins for the same jobA+NoteroA+zotxtA+Google Scholar Citation Count
Read what we found