Security Warning: High Security Risk

Automated analysis found severe security findings in this version. Review the Security Analysis tab before trusting this extension.Extension: フリマアシスト

HIGH RISK

フリマアシスト

ID: jcbljdgnpcckiamdgmnfhijgkkaogmgg

Extension Info & Metadata

Status

Active

Version

3.68.1

Size

2.04 MB

Rating

4.4/5

Reviews

Users

60,000

Type

Extension

Updated

Jun 24, 2026

Publisher Contextual Analysis

Author: きよまろView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

77,956

フリマアプリのWeb版に便利な機能を追加する拡張機能です。

【メルカリWeb版】・商品ページに「出品日時」と「更新日時」を表示・商品ページのコメントに「投稿日時」を表示・キーワード検索結果ページに「外部リンクボタン」を表示・コメント、メッセージの定型文機能【ラクマWeb版】・商品ページに「出品日時」と「更新日時」を表示・商品ページの出品者情報に「評価数」を表示・商品ページの出品者のコメントに「出品者マーク」を表示・キーワード検索結果ページに「外部リンクボタン」を表示・コメント、メッセージの定型文機能【PayPayフリマWeb版】・商品ページに「出品日時」と「更新日時」を表示・キーワード検索結果ページに「外部リンクボタン」を表示

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 3 months ago

28 versions released in this period

Rating Count

Total: 61 ratings

Average Rating

Current: 4.84 / 5.0-0.16

Item	Type	Severity	Description
webNavigation	Permission	High	This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage	Permission	Medium	This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
https://asia-northeast1-furima-assist-free.cloudfunctions.net/*	Host	Medium	Host permission — access limited to this URL pattern.
https://furima-assist.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://kiyomaro.net/*	Host	Medium	Host permission — access limited to this URL pattern.

The bundled manifest requests 'webNavigation' permission, but the published CWS manifest summary lists only 'storage', 'unlimitedStorage', and 'tabs'. This mismatch may indicate a late update or a disclosure discrepancy.

manifest.json (Line 30)

{  "permissions": [    "storage",    "unlimitedStorage",    "tabs",    "webNavigation"  ]}

By severity

Critical0

High1

Medium0

Low0

Versions scanned

None of the 129 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
No versions with more than one unique code-review finding in this extension's history.

Extension Version	Code Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path — top paths by unique finding count:

manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Other	high	manifest.json (line 30)	The bundled manifest requests 'webNavigation' permission, but the published CWS manifest summary lists only 'storage', 'unlimitedStorage', and 'tabs'. This mismatch may indicate a late update or a disclosure discrepancy.	3.68.1

URLs

103

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.


kiyomaro.net	/bt/button.json	https://kiyomaro.net/bt/button.json?t=
developer.mozilla.org	/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage	https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
asia-northeast1-furima-assist-free.cloudfunctions.net	/request	https://asia-northeast1-furima-assist-free.cloudfunctions.net/request
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/define-locale/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/js-date/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/min-max/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/add-inverted-param/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/zone/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/dst-shifted/
www.mercari.com	/jp/search/	https://www.mercari.com/jp/search/?keyword=${t}

Showing 1 to 10 of 110 rows

Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.


1.3.132.0	IPv4	-
1.101.3.4	IPv4	-
10.1.9.34	IPv4	-
7.74.75.75	IPv4	-
10.74.76.43	IPv4	-
3.1.5.1	IPv4	-
2.5.5.5	IPv4	-
4.9.5.5	IPv4	-
46.3.8.9	IPv4	-
1.31.79.79	IPv4	-
2.79.79.79	IPv4	-
5.5.28.39	IPv4	-
2.88.48.48	IPv4	-
10.6.2.8	IPv4	-
10.8.1.1	IPv4	-
3.3.5.3	IPv4	-
1.1.3.5	IPv4	-
3.3.8.8	IPv4	-
1.1.3.3	IPv4	-
1.1.8.5	IPv4	-
1.4.3.5	IPv4	-
23.22.52.38	IPv4	-
1.3.3.3	IPv4	-
1.8.1.2	IPv4	-
1.3.2.5	IPv4	-
12.7.3.2	IPv4	-
4.5.7.9	IPv4	-
2.9.2.1	IPv4	-
4.1.6.2	IPv4	-
4.15.88.22	IPv4	-
8.2.8.2	IPv4	-
3.7.1.8	IPv4	-
3.6.1.8	IPv4	-
3.9.1.6	IPv4	-
3.2.2.9	IPv4	-
2.9.3.9	IPv4	-
2.7.2.9	IPv4	-
3.1.2.6	IPv4	-
3.3.1.2	IPv4	-
2.3.3.5	IPv4	-
12.2.2.4	IPv4	-
3.3.3.5	IPv4	-
3.2.3.5	IPv4	-
3.2.2.4	IPv4	-
3.3.2.2	IPv4	-
3.5.5.7	IPv4	-
99.4.9.1	IPv4	-
3.4.2.8	IPv4	-
3.9.1.7	IPv4	-
1.7.1.5	IPv4	-
1.4.5.2	IPv4	-
8.7.9.3	IPv4	-
124.2.3.9	IPv4	-
2.6.3.5	IPv4	-
41.6.1.5	IPv4	-
73.3.3.3	IPv4	-
37.7.2.2	IPv4	-
14.9.7.6	IPv4	-
58.37.91.55	IPv4	-
4.62.85.77	IPv4	-
7.21.27.25	IPv4	-
55.51.88.71	IPv4	-
1.69.87.48	IPv4	-
4.6.38.13	IPv4	-
1.13.49.4	IPv4	-
27.23.79.15	IPv4	-
8.92.15.75	IPv4	-
1.48.22.78	IPv4	-
42.82.11.84	IPv4	-
4.5.6.2	IPv4	-

Showing 1 to 70 of 70 rows

Rows per page:

2.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

たいへん便利に使わせていただいてます。ここ2週間くらい、ヤフーフリマの価格だけ未入力となってしまいます。

F·28 Jul 2026

コード変更、かなり手間です。コスト回収なら機能の買い切りなどで行ってほしいです

None·28 May 2026

ヤフマからメルカリへ出品する際、画像ありのボタンを押しても反応しなくなりました。画像なしなら出品できますが画像を別のアプリ等でダウンロードしてから出品することになり大変不便になりました。

ryo run·24 Mar 2026

Version	Size	Is Malicious	Findings	Permhash
3.68.2 Latest	2.04 MB	Benign	—	baf80161c63823fdb48adf86e692612c657807360cb1759dca07a42831d42357
3.68.1	2.04 MB	Malicious	1	baf80161c63823fdb48adf86e692612c657807360cb1759dca07a42831d42357
3.67.1	2.04 MB	Benign	—	baf80161c63823fdb48adf86e692612c657807360cb1759dca07a42831d42357
3.67.0	2.04 MB	Benign	—	baf80161c63823fdb48adf86e692612c657807360cb1759dca07a42831d42357
3.66.4	2.03 MB	Benign	—	baf80161c63823fdb48adf86e692612c657807360cb1759dca07a42831d42357
3.66.1	2.03 MB	Benign	—	baf80161c63823fdb48adf86e692612c657807360cb1759dca07a42831d42357
3.65.1	2.03 MB	Benign	—	baf80161c63823fdb48adf86e692612c657807360cb1759dca07a42831d42357
3.64.1	2.03 MB	Benign	—	baf80161c63823fdb48adf86e692612c657807360cb1759dca07a42831d42357
3.63.2	2.03 MB	Benign	—	baf80161c63823fdb48adf86e692612c657807360cb1759dca07a42831d42357
3.62.0	2.03 MB	Benign	—	baf80161c63823fdb48adf86e692612c657807360cb1759dca07a42831d42357

Showing 1 to 10 of 130 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Security Warning: High Security Risk

フリマアシスト

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Manifest File Security Analysis

Code Analysis

Code Review Findings Summary Across 129 Versions1

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating

Security Warning: High Security Risk

フリマアシスト

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Manifest File Security Analysis

Code Analysis

Otherhighmanifest.json

Code Review Findings Summary Across 129 Versions1

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating