Extension Auditor
Extension Auditor
Sign Up

NerdWallet

ID: mfgppbbdeofhlcdcgomihmhaljojfial

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Removed
Version
1.0.9
Size
2.74 MB
Rating
5.0/5
Reviews
2
Users
1,000
Type
Extension
Updated
Mar 27, 2024
Category
Lifestyle Shopping
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Author
NerdWalletView Profile
Privacy
Privacy Policy
Help
Help Center
Country
US
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
55 Hawthorne St #11th San Francisco, CA 94105 US
Website
Visit
Total Extensions
2
Active
0
Obsolete
1
Listed
2
Unlisted
0
Total Users
1,305

Coupons and rewards

Shop smarter with NerdWallet. Install our shopping browser extension, and with one click you'll discover coupons and earn rewards that help you get great deals online. 🛍️ Use with 15K+ retailers Uncover deals at thousands of major retailers 💰Save time and money No more searching for promo codes. Enable the extension, and it automatically finds and applies coupons for you. 🤩 Earn gift cards Rack up rewards as you shop, then redeem them for digital gift cards from more than 1,000 major retailers. By downloading and installing NerdWallet you are agreeing to the following agreements: Terms & Conditions: https://www.nerdwallet.com/lp/shopping-rewards/terms-of-use This is a white label extension made for NerdWallet that uses affiliate programs.

Item
Type
Severity
Description
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
http://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Dangerous Permission Combination: background,webRequest,storage
Risk Factor
High
Enables extensions to operate in the background, intercept web requests, and manage privacy settings and browsing data, facilitating concealed actions and potentially undetected modifications.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
background
Permission
Medium
This permission allows continuous background operation. Rated Medium because it can perform actions without user awareness, consume system resources, and maintain persistent connections.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
URLs
109
IPv4
4
IPv6
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
github.com/crypto-browserify/crypto-browserifyhttps://github.com/crypto-browserify/crypto-browserify
npms.io/searchhttps://npms.io/search?q=ponyfill.
momentjs.com/guides/http://momentjs.com/guides/#/warnings/define-locale/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/js-date/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/min-max/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/add-inverted-param/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/zone/
momentjs.com/guides/http://momentjs.com/guides/#/warnings/dst-shifted/
reactjs.org/docs/error-decoder.htmlhttps://reactjs.org/docs/error-decoder.html?invariant=
developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessagehttps://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
Showing 1 to 10 of 110 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
1.2.3.4
IPv4
-
1.3.132.0
IPv4
-
1.101.3.4
IPv4
-
0.0.0.0
IPv4
-
1:2:3:4:5:6:7:8
IPv6
-
Showing 1 to 5 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In