Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Pricemeister

CRITICAL RISKRemoved from Chrome Web Store

Pricemeister

ID: hjijlhbibhnnlmlacgolbkfjbdhocfod

Could be malicious

Extension Info & Metadata

Status

Removed

Version

4.3

Size

0.04 MB

Rating

4.7/5

Reviews

136

Users

1,107,356

Type

Extension

Updated

Oct 24, 2020

Publisher Contextual Analysis

Author: http://pricemeister.netView Profile
MX records exist: No
Domain exists: No
Is disposable: No
Is role-based: No
Mailbox exists: No

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

1,107,356

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Pricemeister checks for better prices on eBay while you are shopping on Amazon!

Pricemeister - find better prices when shopping on Amazon. Hands down the best price comparison extension for chrome. Find the best deals and prices while online shopping with this online shopping extension. A better price on eBay or other online shop is just one click away. The best tool for best prices in ecommerce and online shopping. Just shop on Amazon and pricemeister finds the best price on eBay or another online shop. The best extension for shopping online. ---- By using this add-on, you agree to the Pricemeister Terms & Conditions: https://pricemeister.net/terms.html Disclaimer: This extension uses Google Analytics to collect extension usage statistics to help improve user experience.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium6

Low1

Versions scanned

Showing 2 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
4.1 Code review	3
4.0 Code review	5

Extension Version	Code Review Findings
4.1	3
4.0	5

Files with findings

3 distinct paths — top paths by unique finding count:

src/background.js4
src/content_script.js3
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Unauthorized Data Collection	high	src/background.js (line 20)	For every Amazon product page visited by any of the extension's 1,107,356 users, this code transmits the product ASIN, search keywords, price (amount and currency), product title, and the Amazon domain to `api.priceme…	4.0
2	Code Injection	medium	src/content_script.js (line 104)	The banner's `href` attribute is set directly from `ebayOffer.link` or `similarEbayOffer.link`, which are URLs returned verbatim from the `api.pricemeister.net` API response without sanitization. If the API server wer…	4.0
3	Phishing	medium	src/content_script.js (line 36)	This code injects a top-of-page banner into Amazon and uses an unvalidated URL supplied by the remote API as the clickable destination. Because the server determines the final link, the extension can steer users to ar…	4.1
4	Privilege Escalation	medium	src/background.js (line 103)	The background service worker dispatches to handler methods by looking up `request.action` directly on the `BackendScript` object with no allowlist validation. Any content script running on a matched Amazon page can s…	4.0
5	Tracking	medium	manifest.json (line 80)	The wildcard pattern `:///*` in web_accessible_resources makes all extension resources accessible to every website on the internet. This allows any third-party website to probe and fingerprint the presence of this e…	4.0
6	Unauthorized Data Collection	medium	src/background.js (line 4)	The extension sends Amazon-derived search terms or product titles to `api.pricemeister.net` and stores the server response locally. That is a form of browsing-intent collection tied to the user's shopping activity, an…	4.1
7	Unauthorized Data Collection	medium	src/content_script.js (line 57)	A polling interval fires every second on every Amazon page load for the lifetime of the tab, continuously monitoring `window.location.href` for changes. Each URL change triggers `onPageLoaded()` which sends shopping d…	4.0
8	Tracking	low	src/background.js (line 36)	The extension phones home on lifecycle events by opening a remote install page and setting a remote uninstall URL. These endpoints can be used to record installs/uninstalls and correlate extension usage with later web…	4.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.pricemeister.net	-	https://www.pricemeister.net/
api.pricemeister.net	/*	https://api.pricemeister.net/*
pricemeister.net	/installed.html	https://pricemeister.net/installed.html
pricemeister.net	/uninstalled.html	https://pricemeister.net/uninstalled.html
api.pricemeister.net	-	https://api.pricemeister.net

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Great extension. it has been really useful in finding what are the best deals around the internet. Helps me save plenty of money.

Smoking Now·19 Nov 2020

This is a very good and helpful extension! thanks you.

cong pham chi·18 Nov 2020

You'll have to spend a lot of money when buying things during this lock-down, and most people have lost their jobs temporarily and it's best to buy things online now, Pricemeister is very helpful extension that help me saving money. Everybody is shopping online due to the pandemic so what better time to use this and save yourself some money while you do.

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Pricemeister

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews