Chrome Web Store
45Versions
1Code reviewed

No malware found

In code review (v1.1.1)

Our reviewer read version 1.1.1 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

1688 Purchasing Assistant Plugin, used by 100,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites, can inject scripts into pages and can observe network requests. It comes from a trusted publisher and was last updated in September 2026.

The analyzed content scripts contain only legitimate functionality: handling postMessage-based communication to extract IDs from 1688 pages and tracking Wangwang unread notifications from. Both are first-party features of the official 1688 Purchase Assistant. The extension's broad permissions are required for its cross-site features (screenshot search, UI injection) and are disclosed in the Chrome Web Store listing (web history, website content collection). No unauthorized data exfiltration, malicious code injection, or suspicious network requests were found. The ML model's risk signal appears to be a false positive driven by minified bundle patterns and standard permission combinations for a shopping tool.

1688 Purchasing Assistant Plugin

1688 Purchasing Assistant Plugin Chrome extension security report

ID: kphldkppgfpjadpabfkghmjbhpcmgpdg

Supported Languages

🇪🇹Amharic
🇸🇦Arabic
🇧🇩Bengali
🇧🇷Brazilian Portuguese
🇬🇧British English
🇧🇬Bulgarian
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇭🇷Croatian
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇪🇪Estonian
🇵🇭Filipino
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇬🇷Greek
🇮🇳Gujarati
🇮🇱Hebrew
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇮🇳Kannada
🇰🇷Korean
🇲🇽Latin American Spanish
🇱🇻Latvian
🇱🇹Lithuanian
🇲🇾Malay
🇮🇳Malayalam
🇮🇳Marathi
🇳🇴Norwegian
🇮🇷Persian
🇵🇱Polish
🇵🇹Portuguese
🇷🇴Romanian
🇷🇺Russian
🇷🇸Serbian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇰🇪Swahili
🇸🇪Swedish
🇮🇳Tamil
🇮🇳Telugu
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇺🇸US English
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
1.2.0
Size
10.20 MB
Rating
4.1/5
Reviews
83
Users
100,000
Type
Extension
Updated
Sep 20, 2026
Category
Shopping
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
https://chajian.1688.com/
MX records exist
No
Domain exists
No
Is disposable
No
Is role-based
No
Mailbox exists
No
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
100,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
webNavigation
Permission
High
This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Dangerous Permission Combination: scripting,cookies,webRequest
Risk Factor
High
Affects data integrity and user control
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk: • 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
declarativeNetRequestFeedback
Permission
Medium
This permission provides network request modification logs. Rated Medium because it can monitor network request changes and debug traffic modifications.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
idle
Permission
Low
This permission detects system idle state. Rated Low because it only observes user activity state without access to activity details.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Official 1688 Plugin for screenshots, product searches, sales trends, downloads, and Wangwang notifications.

Read the publisher’s full description

The 1688 Procurement Assistant Plugin is a free extension developed by the official 1688 platform, aimed at helping users improve their e-commerce purchasing and operational efficiency. It supports one-click screenshot search for similar products across the web, sales and price trend queries, downloading of product materials from 1688, notifications for Wangwang messages and order updates, AI-powered keyword splitting and combination, downloading and analysis of reviews, exporting of entire store products, and more. We hope it becomes your trusted business partner. 🥳 Current plugin features include: 1. One-Click Screenshot Search for Similar Products – Take screenshots on any website to search for similar products via image, such as 1688, Taobao, Douyin Shop, Amazon, OZON, JD.com, Pinduoduo, etc. Multiple convenient screenshot methods are supported, including right-click with mouse or using keyboard shortcuts. 2. Multi-Platform Price Comparison – Image-based price comparison supports 1688, Taobao, Amazon, AliExpress, Alibaba, and will continue to expand to more platforms, making it easy to compare prices across platforms and find the best sourcing options. 3. Image Search Result Filtering & Sorting – Image search results support various filtering conditions, such as “Show Factories Only”, “Supports Sample Orders”, “Free Shipping”, “Private Delivery”, etc. You can also sort results based on your needs by price, sales volume, fulfillment quantity, and more, to efficiently locate the desired 1688 products. 4. Export Product Images & Materials – Batch download images and video materials for comparing similar products. Customize filtering of 1688 product information and export to Excel files, facilitating procurement and inventory operations. 5. View Sales / Price Trends – On 1688 product detail pages, view data such as listing date, update date, transaction trends, price trends, and quantity vs. price relationships. Help with business decisions and insights, powered directly by official 1688 data—efficient, accurate, and real. 6. Distribute Products – Distribution users can switch to distribution mode from image search results, view more 1688 product distribution data and information, select multiple items, and distribute with one click. 7. Wangwang & Order Notifications – Receive push notifications for 1688 Wangwang messages and logistics/order updates to avoid missing business opportunities. 8. Search for Suppliers Across the Web – By searching product titles across the web, quickly find similar products for comprehensive comparisons, making it easier to choose the most cost-effective suppliers and maximize procurement efficiency. 9. Keyword Splitting & Combination – On 1688 product detail pages, easily split and combine any title into new product titles. Our AI assistant will help you select the best titles to increase exposure in search engines and boost product visibility and appeal! 10. Freight Cost Inquiry – Easily check shipping costs directly on 1688 product detail pages to assist in accurate cost estimation and help develop more reasonable procurement strategies. 11. Review Analysis – On 1688 product detail pages, gain deep insights from user feedback through review analysis. The AI system summarizes comment content and provides multi-dimensional evaluations to help identify issues and opportunities. 12. Export Entire Store Products – One-click export of all product information within a 1688 store, enabling centralized management and follow-up data analysis to improve operational efficiency. 13. Order Logistics Tracking – On the 1688 order list page, directly view detailed logistics status for all orders, allowing efficient order management and improved operational performance. 👉 We are continuously improving the official 1688 Procurement Assistant Plugin to meet the needs of professional buyers, including AI-powered product comparison, AI-driven business opportunity analytics, cross-border procurement, and more. If you have any questions or suggestions, please feel free to contact us. 💬 Visit: https://chajian.1688.com Scan the QR code at the top right corner to join the official Alibaba DingTalk group 📨 Email: 1688extension@alibaba-inc.com

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
1.2.0
Latest
10.20 MBNot scanned—
5de2a7e15f06513635a485ae3518722fb0f0f8e4f06599ca86700599e47c53f0
1.1.14
10.18 MBNot scanned—
5de2a7e15f06513635a485ae3518722fb0f0f8e4f06599ca86700599e47c53f0
1.1.11
10.28 MBNot scanned—
06661691bc3d1fd996b38b6b140d42ca78dbb88deffe4c7af6e1352b6de8daef
1.1.10
10.30 MBNot scanned—
06661691bc3d1fd996b38b6b140d42ca78dbb88deffe4c7af6e1352b6de8daef
1.1.9
10.29 MBNot scanned—
5de2a7e15f06513635a485ae3518722fb0f0f8e4f06599ca86700599e47c53f0
1.1.8
10.26 MBNot scanned—
437a756612b0f53af1d376f2d5274857d338f0a51be4466287a0aa146805988c
1.1.6
10.10 MBNot scanned—
5de2a7e15f06513635a485ae3518722fb0f0f8e4f06599ca86700599e47c53f0
1.1.5
10.10 MBNot scanned—
5de2a7e15f06513635a485ae3518722fb0f0f8e4f06599ca86700599e47c53f0
1.1.4
10.10 MBNot scanned—
5de2a7e15f06513635a485ae3518722fb0f0f8e4f06599ca86700599e47c53f0
1.1.3
8.78 MBNot scanned—
917f78e446a2d6c123ed2c1d33f86fabeb3973d88fcfd9edd656cee6d5d86ddc
Showing 1 to 10 of 50 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.