Security Alert: Malware Risk Confirmed
Bookmarks - Amazon, eBay, Aliexpress Price tracker
ID: lmnallohnioagmoedmbagilnbeodaiff
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- rendom.netView Profile
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Bookmarks powered by ChatGPT. Smartmarks, YouTube previews, price tracking on Amazon, eBay, Aliexpress, and Etsy
Smartmarks: Ultimate Bookmark Manager ๐ Elevate your online experience with Smartmarks, the ultimate bookmark manager that changes how you save, organize, and interact with content across major platforms. Key Features: ๐ผ๏ธ Visual Bookmarks with Sidebar Access: Instantly access a visually rich sidebar of bookmarks, complete with images and detailed information, enhancing your browsing without the clutter. ๐๏ธ Comprehensive Price Tracking: Stay ahead with our advanced price watch feature for Amazon, eBay and many others. Get alerts for price drops and historical price trends right in your bookmarks. ๐น Enhanced YouTube & Twitch Bookmarks: Bookmark YouTube videos and Twitch streams with thumbnails, timestamps, and creator information, making it easy to resume or reference content. ๐ฌ Netflix Organization: Keep track of your favorite Netflix shows and movies with personalized bookmarks, ensuring you never lose your place in the endless sea of content. ๐ Organize your web content with detailed descriptions and tags, making it easier to manage and access your bookmarks. ๐ Powerful Search & Auto-Categorization: Quickly find what you're looking for with advanced search capabilities and automatic categorization, specially designed for a seamless browsing experience. ๐จ Customizable Folders: Personalize your bookmark folders with unique icons and colors, making your digital workspace vibrant and easily navigable. ๐ Shopping Assistant: Transform your bookmark manager into a personal shopping assistant with automatic collection and categorization of products from Amazon, Etsy, AliExpress, and eBay. ๐ Video & Content Organization: Automatically sort your YouTube, Twitch, and Netflix content into categories, keeping your favorite videos and shows well-organized and accessible. ๐ Why Choose Smartmarks? For the digital explorer, the online shopper, the video enthusiast, and the binge-watcher, Smartmarks offers a seamless, organized, and enriched online experience. With our sidebar bookmarks, visual snapshots, and personalized organization, navigating your digital universe has never been easier or more enjoyable. Elevate your browsing today with Smartmarks, where every bookmark is a step towards a more organized, accessible, and enriched online experience.
The bundled manifest.json (the version shipped in the ZIP) declares only 4 permissions, while the live CWS listing reveals 11 required permissions and 7 optional permissions not present in the bundle โ including cookies, bookmarks, topSites, geolocation, identity, scripting, tabs, history, and declarativeNetRequestWithHostAccess. This gap is far beyond an incremental feature update; the two manifests describe essentially different capability surfaces. Geolocation in particular is entirely unjustified for a price-tracker/bookmark manager and is absent from the publisher's CWS-disclosed data-collection categories (only 'Authentication information' is listed), making any geolocation use potentially undisclosed collection.
"permissions": ["storage", "alarms", "notifications", "unlimitedStorage"], "optional_permissions": [],// vs. live CWS published manifest:// "permissions": ["storage","cookies","identity","unlimitedStorage","bookmarks",// "topSites","contextMenus","alarms","sidePanel","notifications","geolocation"],// "optional_permissions": ["history","downloads","favicon","tabs",// "scripting","declarativeNetRequestWithHostAccess","identity"]The live CWS manifest adds a wildcard entry ('*') to web_accessible_resources with use_dynamic_url set to false, exposing every extension file at stable, predictable URLs to any web page matching <all_urls>. With stable URLs, any website the user visits can probe for extension resources to silently confirm the extension is installed, enabling persistent cross-site fingerprinting. The bundled manifest limits exposure to specific named paths, so this is an added capability introduced in the published update not present in the analyzed ZIP.
// Bundled web_accessible_resources:"web_accessible_resources": [{"resources": ["assets/*", "components_*.*", "images/*", "fonts/Rubik.ttf", "_resources/*"], "matches": ["<all_urls>"]}]// Published CWS web_accessible_resources:// {"matches": ["<all_urls>"],// "resources": ["_favicon/*","assets/sounds/*","assets/**",// "localization/*","contentScript/*","*"],// "use_dynamic_url": false}By severity
Versions scanned
Showing 1 of 26 scanned versions with more than one unique finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| 2.4.4 | 2 |
Files with findings
1 distinct path โ top paths by unique finding count:
- manifest.json2
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Code Diff
Compare extension code between any two versions.
No comparable text files found between these versions.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
