Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: eBay Filter by sales number

CRITICAL RISKRemoved from Chrome Web Store

eBay Filter by sales number

ID: bbomgfebpgbomdfkbpfpgebbdpjcihhb

Could be malicious

Supported Languages

🇧🇬Bulgarian

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇮🇳Hindi

🇮🇩Indonesian

🇮🇹Italian

🇵🇱Polish

🇷🇴Romanian

🇷🇺Russian

🇪🇸Spanish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.7

Size

0.10 MB

Rating

4.8/5

Reviews

Users

50,377

Type

Extension

Updated

Feb 12, 2023

Publisher Contextual Analysis

Trusted

Author: eBay filtersView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

50,406

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

eBay Filter sold listing arrange products by sales number popularity--eBay watch count completed listings

EBay Filter by sales number is a simple chrome extension for ordonate search rezults on ebay sites depending on the number of sales an item had. Don't lose money and selling blindly in e-Bay dropshipping!!! use this data-rich tool instead. This will take effect after performing a search on the ebay site and will sort the search results by the number of products sold, this fact being very relevant about the quality and the right price of the respective product given its longevity on the site. -FEATURES -Arange and discover the top e-Bay dropshipping products daily. -Very practical to restict promoted products show in first line. -Usiful in dropshhiping market places. We recommend that you pin the extension icon in the right corner to have the function activation menu at hand, as well as to be able to uninstall the extension with a single click.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+267.47%(+36,668 users)

Compared to 3 months ago

7 versions released in this period

Rating Count

Total: 50 ratings

Average Rating

Current: 4.84 / 5.0-0.16

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High2

Medium1

Low0

Versions scanned

Showing 1 of 8 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.5 Code review	6

Extension Version	Code Review Findings
1.5	6

Files with findings

3 distinct paths — top paths by unique finding count:

list/background.js4
options.js1
worker_container.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	list/background.js (line 7)	The background ships with a hard-coded list of 1,300+ redirect rules that intercept users on the cart/checkout pages of dozens of Romanian e-commerce sites and silently rewrite the URL to `gidan.ro/<site>`. This is cl…	1.5
2	Network Interception	critical	list/background.js (line 8463)	Abusing the `tabs` permission, the background watches every URL change in every tab (via `chrome.tabs.onUpdated`) and forcibly rewrites matching URLs with `chrome.tabs.update`. Because content scripts are declared for…	1.5
3	Phishing	critical	list/background.js (line 8096)	The same redirect table targets the cart/checkout/account pages of every major Amazon storefront worldwide (com, co.uk, de, fr, it, es, in, jp, cn, mx, au, nl, sa, sg, ae, com.tr), eBay, Walmart, Etsy, Agoda, Booking …	1.5
4	Obfuscation	high	options.js (line 1)	The options page is the verbatim UI of an unrelated open-source project, `URLAutoRedirector` by David Zhang. The extension is published in the Chrome Web Store as `eBay Filter by sales number` but its settings UI expo…	1.5
5	Remote Code Loading	high	list/background.js (line 8394)	Rules are user-editable through the options page and live-synced via `chrome.runtime.onMessage` (`syncOptions`) into a `RegExp(src).replace(re, dst)` pipeline. Because both `src` and `dst` are attacker- or update-cont…	1.5
6	Obfuscation	medium	worker_container.js (line 1)	The MV3 service worker bootstraps a hidden script (`list/background.js`) that has nothing to do with the advertised eBay filter functionality. The wrapping try/catch silently swallows load failures, hiding the existen…	1.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


3.234.237.16	/api/rules/all	http://3.234.237.16/api/rules/all
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


3.234.237.16	IPv4	-

3.8 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Not working!!!

ДГ

Дмитрий Громак·4 Feb 2023

Nothing happened

ddccd Ricky·29 Nov 2022

NOT WORKING ANYMORE

Pi Zoidberg·25 Nov 2022

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

eBay Filter by sales number

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 8 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating