Security Alert: Critical Security Risk

Automated analysis found severe security findings in this version. Review the Security Analysis tab before trusting this extension.Extension: FIVERR +

CRITICAL RISK

FIVERR +

ID: pgklcnjgjcnkfiepibhakpikmmjnobog

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Active

Version

3.1

Size

4.34 MB

Rating

4.8/5

Reviews

192

Users

5,000

Type

Extension

Updated

Oct 10, 2022

Publisher Contextual Analysis

Trusted

Author: AnyThinkView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

8,007

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Best seller/buyer features for Fiverr.

🚀 Boost your service experience with FIVERR +. 🚫 No username or password required. Features: ✅ Display buyer profile link in request ✅ Open profile popover by clicking buyer image ✅ Display buyer profile link when offering to request ✅ Open profile popover when offering to request by clicking buyer image ✅ Highlight today's buyer requests ✅ Mark previously seen / unseen requests ✅ Super easy attachment previewer (beta) Pro features will be added in the future. (For suggestions or feedback contact developer.) Note : This is NOT an official product of Fiverr International Ltd and has no affiliation with Fiverr International Ltd. This product is intended to be merely a productivity tool.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 152 ratings

Average Rating

Current: 4.89 / 5.0-0.04

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High3

Medium1

Low0

Versions scanned

Showing 1 of 8 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.1 Code review	6

Extension Version	Code Review Findings
3.1	6

Files with findings

2 distinct paths — top paths by unique finding count:

background.js5
optional.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	background.js (line 80)	The background service worker silently fetches `https://www.fiverr.com/inbox` without any user interaction, parses the inline JavaScript to extract Fiverr's `document.pageScope` object, and exfiltrates the user's full…	3.1
2	Unauthorized Data Collection	critical	background.js (line 45)	On every install and startup event, the extension harvests the user's Google account email address and Google account ID via `chrome.identity.getProfileUserInfo()`, then AES-encrypts these identifiers and silently POS…	3.1
3	Credential Theft	high	background.js (line 127)	The background script silently acquires a Google OAuth access token via `chrome.identity.getAuthToken()` at every startup, then fetches the Google userinfo endpoint with that token. The response callback is empty (`th…	3.1
4	Remote Code Loading	high	background.js (line 115)	The `pC()` function decrypts a server-issued activation blob stored in `chrome.storage.sync` and gates all premium features (including attachment previews) on a remote server flag `activate == true` with a 40-day vali…	3.1
5	Tracking	high	background.js (line 5)	The `contactAuthServer` function is invoked on both the `onInstalled` and `onStartup` lifecycle events, transmitting the user's Google identity and Fiverr account data to the remote server with an event-type tag (`'in…	3.1
6	Code Injection	medium	optional.js (line 13)	This script is injected at `run_at: document_start` with `all_frames: true`, meaning it runs before any page content is parsed in every iframe on fiverr.com. It registers a `DOMNodeInserted` mutation event (a deprecat…	3.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


fiverr-plus.vercel.app	-	https://fiverr-plus.vercel.app
www.fiverr.com	/inbox	https://www.fiverr.com/inbox
www.googleapis.com	/oauth2/v1/userinfo	https://www.googleapis.com/oauth2/v1/userinfo?alt=json&access_token=
www.fiverr.com	-	https://www.fiverr.com/
view.officeapps.live.com	/op/embed.aspx	https://view.officeapps.live.com/op/embed.aspx?src=
docs.google.com	/viewer	https://docs.google.com/viewer?url=
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.googleapis.com	/auth/userinfo.email	https://www.googleapis.com/auth/userinfo.email
www.googleapis.com	/auth/userinfo.profile	https://www.googleapis.com/auth/userinfo.profile

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


7.6.3.2	IPv4	-
8.7.3.1	IPv4	-
12.6.4.7	IPv4	-
6.2.5.7	IPv4	-
6.5.8.2	IPv4	-
7.4.3.1	IPv4	-
6.4.11.3	IPv4	-
6.4.11.4	IPv4	-
6.5.8.1	IPv4	-
6.4.11.1	IPv4	-
6.4.11.2	IPv4	-
6.6.5.2	IPv4	-
7.4.2.1	IPv4	-
9.6.6.1	IPv4	-
9.7.6.2	IPv4	-
9.6.6.4	IPv4	-
9.6.6.2	IPv4	-
1.8.6.5	IPv4	-
1.7.5.4	IPv4	-
4.6.8.6	IPv4	-
3.1.6.3	IPv4	-
4.3.5.8	IPv4	-
5.1.7.2	IPv4	-
1.8.64.5	IPv4	-
51.13.38.63	IPv4	-
13.64.35.64	IPv4	-
1.7.6.6	IPv4	-
1.7.7.6	IPv4	-

Showing 1 to 28 of 30 rows

Rows per page:

4.3 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Awesome

Tricks Dot Com·19 Dec 2025

great

Rayhan Sabbir·16 Mar 2025

great

Arif Hossain·16 Mar 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Critical Security Risk

FIVERR +

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 8 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating