Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Aqui tem pontos Livelo!

CRITICAL RISKRemoved from Chrome Web Store

Aqui tem pontos Livelo!

ID: acdpmmdcopboeimeaokoadbinndnmaep

Could be malicious

Supported Languages

🇧🇷Brazilian Portuguese

Extension Info & Metadata

Status

Removed

Version

0.2.2

Size

0.30 MB

Rating

1.9/5

Reviews

Users

200,000

Type

Extension

Updated

Sep 6, 2023

Publisher Contextual Analysis

Author: LiveloView Profile
Privacy: Privacy Policy
Help: Help Center
Country: BR
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: Alameda Xingu, 512 1º andar Barueri, SP 06455-914 BR

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

200,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Olá, você na Livelo para Chrome. Acumular pontos Livelo ficou ainda mais fácil! Vamos começar?

Aqui tem pontos Livelo! Ganhe pontos Livelo nas compras online nos principais sites de compras do Brasil Veja como funciona: Com o Aqui tem pontos Livelo! no seu navegador, você nunca vai esquecer que pode ganhar pontos Livelo, pois receberá uma notificação assim que acessar um site parceiro da Livelo! Depois é só utilizar seus pontos para resgatar sua recompensa!

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 3 months ago

3 versions released in this period

Rating Count

Total: 45 ratings

Average Rating

Current: 2.33 / 5.0-0.79

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium6

Low0

Versions scanned

Showing 1 of 6 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.2.0 Code review	9

Extension Version	Code Review Findings
0.2.0	9

Files with findings

3 distinct paths — top paths by unique finding count:

js/background.js5
js/content.js2
js/funcoes.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	high	js/funcoes.js (line 2)	The extension popup dynamically loads and executes a remote Google Tag Manager script inside an extension page. Remote JavaScript in a privileged extension context is a high-risk pattern because the remote container c…	0.2.0
2	Tracking	high	js/background.js (line 141)	When the user lands on a partner site, the extension can automatically open a new tab to a remote-configured redirect URL and then writes cookies on partner domains. This is a classic affiliate/attribution manipulatio…	0.2.0
3	Unauthorized Data Collection	high	js/background.js (line 45)	The extension monitors every tab update and retrieves the hostname and path for every URL visited by the user. This data is then checked against a remote JSON configuration, enabling detailed tracking of user browsing…	0.2.0
4	Code Injection	medium	js/content.js (line 80)	Injects custom HTML and images directly into Google search results. This modifies the visual presentation of search results to prioritize partner sites, potentially misleading users into clicking affiliate-controlled …	0.2.0
5	Code Injection	medium	js/funcoes.js (line 571)	The popup builds HTML directly from remotely fetched JSON fields, including link destinations and text injected into the DOM, with no escaping beyond the element id. If the remote API is compromised or modified, this …	0.2.0
6	Other	medium	js/background.js (line 142)	Automatic redirection to affiliate links using 'chrome.tabs.create' when a user visits a partner's homepage. This adware-like behavior can be intrusive and is often used for affiliate link hijacking without explicit u…	0.2.0
7	Other	medium	js/background.js (line 23)	The background page downloads a remote partner configuration and uses it to inspect every updated tab URL across all browsing sessions. Even though this snippet does not exfiltrate the URLs directly, it establishes a …	0.2.0
8	Other	medium	js/content.js (line 58)	The content script rewrites Google search and ad results by appending Livelo promotional markup next to matched links. This is search-result/ad injection behavior: it alters third-party page content to steer users tow…	0.2.0
9	Tracking	medium	js/background.js (line 164)	The extension injects cookies ('ExtensaoLivelo') into third-party partner domains without user interaction. This is used for tracking and ensuring affiliate attribution on partner sites.	0.2.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

305

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


fonts.googleapis.com	/css	https://fonts.googleapis.com/css?family=Signika:300,400,600,700&display=swap
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.google-analytics.com	-	https://www.google-analytics.com
www.googletagmanager.com	/;	https://www.googletagmanager.com/;
static.pontoslivelo.com.br	/content/img/extensao/json/.	https://static.pontoslivelo.com.br/content/img/extensao/json/.
static.pontoslivelo.com.br	/content/img/extensao/promocao/.	https://static.pontoslivelo.com.br/content/img/extensao/promocao/.
apis.pontoslivelo.com.br	/configurations/v1/parities-plugin	https://apis.pontoslivelo.com.br/configurations/v1/parities-plugin
*	/*	https:///
*	/*	http:///
static.pontoslivelo.com.br	/content/img/extensao/json/parceiros_banners.json	https://static.pontoslivelo.com.br/content/img/extensao/json/parceiros_banners.json

Showing 1 to 10 of 310 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

1.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Ponto Frio nao funciona. Livelo nao reconhece e diz que a compra nao foi feita através do parceiro

FERNANDO PENNA·18 Jul 2024

Funciona em alguns sites. Amazon não reconhece e diz que não é parceiro.

Marcelo Watanabe·17 Jul 2024

nao funciona

MARCEL SCARTON·

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Aqui tem pontos Livelo!

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 6 Versions9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating