Chrome Web Store
1Versions
1Code reviewed

Do not install

Code review: critical

Our reviewer read this extension’s code and confirmed malicious behaviour. 2 security findings documented below. Do not install it. Remove it if you already have it.

1 critical finding in this extension’s code

1 critical
1 high
40 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Amazon Sticky Notes is rated malicious by Extension Auditor. Our code review reported 2 findings (1 critical, 1 high), led by other. It comes from a publisher with 20 extensions and was last updated in February 2026.

Key findings

  • Critical

    Other

    The extension silently rewrites every Amazon product link on the page with the publisher's affiliate tag '10xprofit-20' (Amazon Associates ID). The rewriter runs on a 5-second interval to catch dynamically loaded content. This generates affiliate revenue for the publisher on every user purchase without any user awareness or consent, and is not disclosed anywhere in the CWS listing or privacy policy.

  • High

    Other

    independently applies the affiliate tag to all product URLs rendered in the notes viewer page, ensuring the affiliate code is injected even when the user revisits saved notes and clicks through to Amazon products. This is a second, separate injection point confirming the affiliate hijacking is intentional and pervasive throughout the extension.

Analyst notes

defines AFFILIATE_TAG='10xprofit-20' and calls rewriteLinks() on a 5-second interval (setInterval at line 153), silently appending the publisher's Amazon affiliate tag to every product and listing link on the page. independently applies the same tag to stored note URLs shown in the notes viewer (line 53). This hidden affiliate hijacking is never disclosed to users — the CWS listing declares zero data collection and the description explicitly claims 'Notes Saved Locally (Private).' The ML score and IoC flag ([domain withheld] affiliate hijacking report) are fully corroborated; publisher reputation ( other extensions malicious) is a strong additional corroborator.

Amazon Sticky Notes

Amazon Sticky Notes Chrome extension security report

ID: hkhmodcdjhcidbcncgmnknjppphcpgmh

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
3.0.1
Size
0.02 MB
Rating
5.0/5
Reviews
1
Users
6
Type
Extension
Updated
Feb 17, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
20extensions
All still listed

Publisher Contextual Analysis

Author
10Xprofit
Country
BD
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
House: 1034, Avenue: 8, Mirpur DOHS Dhaka 1216 BD
Website
Visit
Extensions
20
Active
20
Obsolete
0
Listed
20
Unlisted
0
Users
1,237

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3

Install growth

Item
Type
Severity
Description
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
  • 1 critical
  • 1 high

The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.

1 critical finding in this extension’s code

1 critical
1 high
40 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Add sticky notes to Amazon products and view them later.

Read the publisher’s full description

Keep Your Amazon Product Research Organized with Private Sticky Notes Amazon Sticky Notes helps you save research notes directly on Amazon product pages—so you never lose your thoughts while sourcing, comparing, or analyzing products. Add a private note like “Good margin”, “Contact supplier X”, “Check competitor pricing” and it will automatically reappear whenever you return to that same product. ⭐ Key Features ✅ Sticky Notes on Any Amazon Product Page ➞ A small 📝 icon appears on the bottom-right of product pages—click to write notes instantly. ✅ Notes Saved Locally (Private) ➞ Your notes are stored locally in your browser and are not shared publicly. ✅ Auto-Reappear Per Product ➞ Notes are linked to the product you’re viewing and show again when you revisit that product later. ✅ Dashboard to Manage All Notes ➞ Open the extension from the toolbar to access a dashboard where you can view (and manage) all saved notes in one place. ✅ Perfect for Research Workflows ➞ Great for sellers, VAs, sourcing teams, and anyone doing Amazon product comparisons. 🧠 How to Use Go to any Amazon product page ➞ Click the 📝 Sticky Note icon (bottom-right) ➞ Write your note and click Save ➞ Revisit the product later—your note will be there ➞ Use the extension Dashboard to see all notes 🔒 Privacy Notes are saved locally in your browser. The extension does not sell your data and does not publish your notes. ✅ FAQs 1) Are my notes public or visible to other people? ➞ No. Notes are private and stored locally in your browser. 2) Will my note show again when I visit the same product? ➞ Yes. Notes are attached to the product and automatically reappear when you return to that product page. 3) Where can I see all my saved notes? ➞ Click the extension icon in the toolbar to open the Dashboard, where you can view all notes in one place. 4) Does it work on all Amazon marketplaces? ➞ It’s designed to work across Amazon country domains; page layout variations may affect icon placement, but product pages are supported. 5) Will I lose my notes if I remove Chrome or clear browser data? ➞ Notes are stored locally, so clearing extension/site data or uninstalling may remove them (unless you export/backup in your workflow).

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
26

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

1 critical finding in this extension’s code

1 critical
1 high
40 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
3.0.1
Latest
0.02 MBMalicious0
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
Showing 1 to 1 of 10 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.