Security Alert: Critical Security Risk

Automated analysis found severe security findings in this version. Review the Security Analysis tab before trusting this extension.Extension: 爱搜资源助手

CRITICAL RISK

爱搜资源助手

ID: mbklgpngoohbbagagdfoccaclpdhgihd

Supported Languages

🇨🇳Chinese (Simplified)

Extension Info & Metadata

Status

Active

Version

4.0.8

Size

0.08 MB

Rating

3.9/5

Reviews

Users

10,000

Type

Extension

Updated

Jul 21, 2025

Publisher Contextual Analysis

Trusted

Author: https://www.aisouziyuan.com/View Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

10,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

自动检测主流云盘链接时效性，自动获取云盘提取码。

==>功能列表 * 自动获取百度云，阿里云，夸克，等主流云盘网盘提取密码。 * 自动检测主流云盘链接时效性。 ==>隐私说明 * 使用本扩展工具默认功能全部打开。 * 本扩展会默认选中分享您输入云盘的提取码。 * 本扩展会默认会收集您预览的网页是否存在云盘链接进行检测云盘链接是否有效。 * 本扩展会默认会收集您预览的网页携带的【云盘链接+提取码】以便您打开云盘链接自动填充提取码。 * 本扩展会默认选择收集云盘信息（如：文件名称、大小、分享时间、头像等）。 * 如果您使用本扩展，将默认接受该隐私使用条款。 ==>官网爱搜资源：http://www.aisouziyuan.com 隐私协议：http://www.aisouziyuan.com/privacy.html

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 48 ratings

Average Rating

Current: 3.83 / 5.0-0.02

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High1

Medium2

Low0

Versions scanned

Showing 1 of 7 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
4.0.8 Code review	6

Extension Version	Code Review Findings
4.0.8	6

Files with findings

4 distinct paths — top paths by unique finding count:

js/content-script.js3
js/background.js1
js/config.js1
js/hook-build.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	js/background.js (line 8)	The service worker is a generic HTTP proxy: any message containing `{url, method, body, headers}` triggers a `fetch` from the extension's privileged origin (with `<all_urls>` host permission and `credentials: 'same-or…	4.0.8
2	Network Interception	critical	js/hook-build.js (line 1)	This script monkey-patches both `XMLHttpRequest.prototype.open/send` and `window.fetch` on every page it is injected into, capturing every JSON request URL, method, post body and response and broadcasting them via `wi…	4.0.8
3	Remote Code Loading	critical	js/content-script.js (line 17)	The content script downloads arbitrary JavaScript from the remote server (helper.aisouziyuan.com/Extensions/Api/Js/4.0), persists it in chrome.storage.local as `_localJS_`, and executes it via the bundled `eval5` Java…	4.0.8
4	Code Injection	high	js/content-script.js (line 1)	At document_start on every URL, the extension injects `hook-build.js` into the page's MAIN world via a `<script>` tag. The list of regex URL patterns gating the injection (`_hookRegUrl_`) is itself downloaded from the…	4.0.8
5	Obfuscation	medium	js/content-script.js (line 1)	All identifiers and string accesses use bracket notation with hex literals (`0x0`, `0x36ee80 * 0x8`) and `!![]` for booleans — a typical light obfuscation/minification used to make manual review and static-analysis pa…	4.0.8
6	Other	medium	js/config.js (line 1)	Hardcoded C2 endpoint at `helper.aisouziyuan.com/Extensions/Api` (and a debug counterpart on port 51000). All four malicious capabilities (script update, site list, generic HTTP proxy target, regex hook list) flow thr…	4.0.8

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	/*	http:///
*	/*	https:///
github.com	/bplok20010/eval5	https://github.com/bplok20010/eval5
test.helper.aisouziyuan.com	-	http://test.helper.aisouziyuan.com:51000
helper.aisouziyuan.com	-	https://helper.aisouziyuan.com
www.aisouziyuan.com	-	http://www.aisouziyuan.com

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.8 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

好东西，可惜用的人太少了，所以有提取码的链接不多

膜

膜蛤膜哈长者·30 Jul 2026

感谢，好用

jc z·13 Apr 2026

非常好用，为数不多好的工具

Flora ZHAO·28 Aug 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Critical Security Risk

爱搜资源助手

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 7 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating