Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: 網翼蝦皮印單工具

CRITICAL RISKRemoved from Chrome Web Store

網翼蝦皮印單工具

ID: ihbjgmohhfmgfplncjofjmmdobnhfelg

Could be malicious

Supported Languages

🇹🇼Chinese (Traditional)

Extension Info & Metadata

Status

Removed

Version

3.6.9

Size

2.21 MB

Rating

5.0/5

Reviews

Users

6,000

Type

Extension

Updated

Nov 6, 2024

Publisher Contextual Analysis

Author: ERPowView Profile
Privacy: Privacy Policy
Country: TW
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: 文化路林口區, 新北市 244 TW
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

25,507

Email Change History

1 change

Feb 22, 2024

Domain changed

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

蝦皮印單神器。蝦皮印單工具提供多種印單版型並支援標籤機列印。可以把標籤重新排列成「條碼-明細」的順序。阿靳印單工具

網翼電商經營工具精心規劃，以自身網拍經驗開發蝦皮印單工具能完美支援標籤機列印四大超商出貨單除了店到店，我們還支援7-11及全家大物流我們開發了多種版型。不只支援標籤機，還同時支援A4印表機任何一種列印方式都能讓您印出標籤並對應到訂單明細同時我們還提供了廣告版面，讓您對客戶進行二次銷售超簡單的一鍵列印，無縫整合蝦皮印單沒有不支援的超商，無論是7-11 全家萊爾富及OK，都能完美列印還能匯出撿貨總表，加快出貨速度！更精準掌握庫存及銷售數量！瞭解更多詳情，請LINE ID 搜尋 @jwv5600v 更多網拍賣家專用軟體請瀏覽 http://ajin.tw

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 4 months ago

6 versions released in this period

Rating Count

Total: 1 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High2

Medium2

Low0

Versions scanned

Showing 1 of 27 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.6 Code review	8

Extension Version	Code Review Findings
3.6	8

Files with findings

3 distinct paths — top paths by unique finding count:

background.bundle.js4
content.bundle.js2
popup.bundle.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	critical	background.bundle.js (line 2)	All authentication operations — including user login (`DoLogin`), persistent auto-login (`DoAutoLogin`), and Shopee OAuth token management (`BindShop`, `UnBindShop`, `GetShopList`) — are proxied through a third-party …	3.6
2	Credential Theft	critical	popup.bundle.js (line 946)	The login form collects the user's plaintext username and password and sends them via `DoLogin` to the background script, which forwards them as a JSON POST body to the third-party server. The server returns a `UserKe…	3.6
3	Data Exfiltration	critical	background.bundle.js (line 88)	Order data retrieval and reporting operations (`GetPrintData`, `QuickPrintGetOrder`, `AddPickupQueue`, `AddShopReportQueue`) are all routed through the third-party server. This causes the full content of Shopee mercha…	3.6
4	Privilege Escalation	critical	content.bundle.js (line 10)	The content script runs at `document_start` on Shopee OAuth authorization pages (`https://open.shopee.com/authorize`, `https://account.seller.shopee.com/signin/oauth/`) and automatically clicks the "Confirm Authoriz…	3.6
5	Remote Code Loading	high	background.bundle.js (line 83)	On every Shopee seller page load, the content script fetches configuration (`GetPageSetting`) from the third-party server, which controls the API endpoint URLs used for subsequent data collection. The operator can cha…	3.6
6	Unauthorized Data Collection	high	content.bundle.js (line 28)	The content script directly calls Shopee's internal seller APIs (`get_one_order`, `income_transaction_history_detail`) using the authenticated seller session to harvest per-order financial details: buyer payment amoun…	3.6
7	Tracking	medium	background.bundle.js (line 27)	On every install and update, the extension automatically opens a tab to the third-party server's `/Manual` page. This allows the operator to track installation events and correlate them with IP addresses and browser f…	3.6
8	Tracking	medium	popup.bundle.js (line 291)	The popup dynamically constructs and injects HTML containing an image loaded from the third-party server with a random cache-busting parameter (`Math.random()`). This creates a tracking beacon that pings the operator'…	3.6

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

131

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


ex-shopeeprint.ajinerp.com	-	https://ex-shopeeprint.ajinerp.com
epayment.7-11.com.tw	/C2C/C2CWeb/	https://epayment.7-11.com.tw/C2C/C2CWeb/
ex-shopeeprint.ajinerp.com	/Manual	https://ex-shopeeprint.ajinerp.com/Manual
seller.shopee.tw	/*	https://seller.shopee.tw/*
account.seller.shopee.com	/signin/oauth/*	https://account.seller.shopee.com/signin/oauth/*
open.shopee.com	/authorize*	https://open.shopee.com/authorize*
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
account.seller.shopee.com	/signin/oauth	https://account.seller.shopee.com/signin/oauth
open.shopee.com	/authorize	https://open.shopee.com/authorize
seller.shopee.tw	/api/v4/accounting/pc/seller_income/income_detail/get_order_income_components	https://seller.shopee.tw/api/v4/accounting/pc/seller_income/income_detail/get_order_income_components

Showing 1 to 10 of 140 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


45.77.244.21	IPv4	-

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

網翼蝦皮印單工具

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Email Change History

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 27 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

Security Alert: Confirmed Malware

網翼 蝦皮印單工具

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Email Change History

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

網翼蝦皮印單工具