Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: BubbleScout

CRITICAL RISKRemoved from Chrome Web Store

BubbleScout

ID: ejflclacgbemhldfamhobdfnhkigpdkk

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

3.2.0

Size

0.55 MB

Rating

2.9/5

Reviews

Users

9,858

Type

Extension

Updated

Feb 27, 2022

Publisher Contextual Analysis

Author: https://bubblescout.comView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

9,858

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Know each Redbubble® product's estimated sales/month, copy product tags, and much more!

The ultimate RedBubble® niche tool. Checkout latest changes here: https://bubblescout.com/pages/updates 🤘 TL;DR A tool to see how well all products and keywords do on Redbubble®, as well as, see top searched data and copy product tags. Want to learn from your competitors? Want to see how well keywords and products do? As easy as a click of a button, see how well products do to see their sales/month, revenue/month, a trend analysis, and our own "Niche Score". The niche score will tell you on a score out of 10, would we recommend entering the niche. Download now and see it for yourself. 🤘 Features: ➡️ Get data on the top 20 products, top 20 keywords, and top 20 trending keywords. ➡️ Know each Redbubble keyword's estimated sales/month and much more! ➡️ See a keyword's popularity trend over time. ➡️ Copy a product's tags 🤘 Website: https://bubblescout.com 🤘 Contact Us: [email protected] Grow your RedBubble sales today.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+3.62%(+344 users)

Compared to 3 months ago

3 versions released in this period

Rating Count

Total: 46 ratings

Average Rating

Current: 3.22 / 5.0+0.91

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High0

Medium3

Low1

Versions scanned

Showing 1 of 16 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.0.7 Code review	4

Extension Version	Code Review Findings
2.0.7	4

Files with findings

2 distinct paths — top paths by unique finding count:

background.js3
service-worker.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	medium	background.js (line 83)	Keywords scraped from the user's Redbubble search results plus BSR data scraped from Amazon are POSTed to a third-party Firebase Cloud Function authenticated with a Firebase ID token derived from the user's Google ide…	2.0.7
2	Remote Code Loading	medium	service-worker.js (line 14)	The shipped service worker uses importScripts() to fetch and execute JavaScript from a remote URL (storage.googleapis.com/workbox-cdn). Loading executable code from outside the extension package is the textbook defini…	2.0.7
3	Unauthorized Data Collection	medium	background.js (line 298)	The background service worker silently fetches Amazon search and product detail pages from the user's authenticated browsing context (cookies/IP) and regex-scrapes BSR data, then forwards it to the extension's own Fir…	2.0.7
4	Credential Theft	low	background.js (line 143)	The extension uses chrome.identity.getAuthToken with interactive:true to obtain a Google OAuth access token, then exchanges it via signInWithCredential for a Firebase ID token. This is standard Firebase-with-Google-Id…	2.0.7

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


bubblescout.com	/pages/intro	https://bubblescout.com/pages/intro
bubblescout.com	/pages/updates	https://bubblescout.com/pages/updates
bubblescout.com	/pages/before-you-leave	https://bubblescout.com/pages/before-you-leave
data.bubblescout.com	/save	https://data.bubblescout.com/save
data.bubblescout.com	/save	https://data.bubblescout.com/save?accessKey=${storageData.accessKey}`,
data.bubblescout.com	/accessKey	https://data.bubblescout.com/accessKey?a=check&accessKey=${accessKey}`
data.bubblescout.com	/subscription	https://data.bubblescout.com/subscription
www.amazon.com	/s	https://www.amazon.com/s?${getQueryParams(keyword
amazon.com	-	https://amazon.com
data.bubblescout.com	/search	https://data.bubblescout.com/search

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Hello, last night I purchased the monthly plan, and nothing has worked for me. I have sent two emails to the support email, and in the email, I attached a video for you to see that the extension is not working. Nothing appears, no top 20, no analysis, nothing. Please, I need your response. My email is [email protected]. I have already written you two emails.

jorlec jose morales oviedo·1 Dec 2023

Total garbage. Couldn't get it to generate access key as per instructions. Finally tried "reset access key" and it generated one but when I entered it is said it was invalid. Total waste of my time.

Corinne S·29 Nov 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

BubbleScout

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 16 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating