Extension Auditor
Sign Up
Chrome Web Store
1Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

90 indicators in this extension

90 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

OneCart is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in September 2023.

OneCart

OneCart Chrome extension security report

ID: konafnhghhmkakeffeompdfmgodkfgia

Supported Languages

🇨🇳Chinese (Simplified)
🇺🇸English

Extension Info & Metadata

Status
Active
Version
0.0.10
Size
0.55 MB
Rating
1.3/5
Reviews
3
Users
99
Type
Extension
Updated
Sep 26, 2023
Category
Shopping
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Trusted
Author
onecart.app
Privacy
Privacy Policy
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
99

Screenshots & videos

Screenshot 1
Screenshot 2

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
identity.email
Permission
High
This permission directly accesses the user's email address. Rated High because it reveals personally identifiable information and can be used for tracking or targeting.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
https://onecart.app/*
Host
Medium
Host permission — access limited to this URL pattern.
https://api.onecart.app/*
Host
Medium
Host permission — access limited to this URL pattern.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

90 indicators in this extension

90 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Save all of your shopping items in one place and save money.

Read the publisher’s full description

Tired of jumping between shopping sites? Having hard time keeping track of what you are shopping for? With OneCart, you can add all items in one place! It will also monitor prices and find deals for you! Nike, Etsy, Shein, Amazon...... OneCart supports thousands of e-commerce sites. Save money and shopping hassle-free with OneCart!

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
URLs
8
IPv4
72

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

90 indicators in this extension

90 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
0.0.10
Latest
0.55 MBNot scanned—
a8162adf7e99eda1a389eb9e98c457ad7190b5a0e337eae3d8d7189fb9a480de
Showing 1 to 1 of 10 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In