Chrome Web StoreDo not install
Code review: critical (v4.0.1)
Our reviewer read version 4.0.1 of this extension and confirmed malicious behaviour. 3 security findings documented below. Do not install it. Remove it if you already have it.
13 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
SHEIN Search By Image is rated malicious by Extension Auditor. Our code review reported 3 findings (1 critical, 2 high), led by tracking. Its permissions mean it can read and change data on all websites.
Key findings
- Critical
Tracking
The content script silently replaces every SHEIN product link on the page (and on dynamically loaded content via MutationObserver) with an affiliate redirect through [domain withheld] before the user clicks. The destination domain [domain withheld] is unrelated to the publisher ([domain withheld]), is not a well-known SaaS service, and zero data collection is disclosed in the CWS listing. Users clicking any product link on [domain withheld] are unknowingly channeled through a monetizing redirect they never consented to.
- High
Tracking
The welcome page's 'Go to SHEIN' button hard-codes the bare affiliate redirect URL ([domain withheld]) as the href with no SHEIN destination appended, meaning clicking it fires the affiliate tracker with an empty ulp parameter. The HTML comment 'Updated Affiliate Link' confirms this is deliberate monetisation infrastructure, not a UI placeholder. Combined with the hijacker, every user interaction on SHEIN — from installation forward — is routed through the undisclosed affiliate redirect.
- High
Other
The bundled privacy policy consistently names 'AliExpress Search By Image' and references the 'AliExpress Affiliate Program', not SHEIN — demonstrating this extension is a direct rebrand of a prior affiliate-hijacking extension with only the store name changed. This copy-paste rebranding pattern is a known technique for mass-deploying monetisation malware while evading per-extension review history, and it means no accurate disclosure was ever presented to users of this SHEIN-branded version.
Analyst notes
(lines 1–52) contains an unambiguous affiliate link hijacker: a MutationObserver-backed loop silently rewrites every SHEIN product link (those matching '-p-' in the path) to a third-party affiliate redirect URL at [domain withheld] before the user clicks — without any disclosure in the CWS listing (data collection declared: none) and directly contradicting the extension's own 'Privacy-Friendly' claim. The internal IoC note from [domain withheld] independently confirms this exact technique. The and reference 'AliExpress Search By Image' throughout, revealing this is a rebranded clone of a prior affiliate-hijacking extension, further corroborated by the publisher's (19%) malicious extension rate and the permhash cluster showing 26% of peers flagged as malware. ML score of 0.91 and the third-party risk score are both corroborated by the code evidence; no signals contradict the malicious verdict.
SHEIN Search By Image Chrome extension security report
ID: mpgaodghdhmeljgogbeagpbhgdbfofgb
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- ecomstal.official
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- BD
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Address
- House: 1034, Avenue: 8, Mirpur DOHS Dhaka 1216 BD
- Website
- Visit
Screenshots & videos
Install growth
13 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Right-click any image to search on SHEIN! Find products fast and dropship easily with this powerful image search tool.
Read the publisher’s full description
Find Products on SHEIN Using Any Image (One Right-Click) SHEIN Search by Image helps you discover similar items on SHEIN using an image from anywhere on the web. Simply right-click an image and select “Search on SHEIN”—the extension opens a new tab and starts your image-based search. Perfect for fashion sourcing, trend research, dropshipping, and finding matching outfits quickly. ⭐ Key Features ✅ Right-Click “Search on SHEIN” Adds a context-menu option to search an image directly on SHEIN. ✅ Works on Most Websites Use photos from online stores, social media, ads, or competitor pages. ✅ Faster Product Discovery Quickly find similar styles and related listings on SHEIN. ✅ Lightweight & Simple No setup—install and start searching instantly. ✅ Privacy-Friendly Only uses the image you select when you trigger the search action. 🧠 How to Use ➜ Find any image on the web ➜ Right-click the image ➜ Select “Search on SHEIN” ➜ View results in a new tab 🔒 Privacy This extension does not collect or sell personal data. It only initiates a search when you choose the context-menu option. 🤝 Affiliate Disclosure Some links shown in the extension (or its pages) may be affiliate links. If you click and make a purchase, we may earn a commission at no extra cost to you. This helps support development and maintenance. ✅ FAQs 1) Do I need to download the image first? No—just right-click the image and choose “Search on SHEIN.” 2) Does it work on any website? It works on most sites where images can be right-clicked, but some websites restrict image access or disable right-click. 3) Where does the search open? It opens the SHEIN search in a new tab. 4) Does it store my images or browsing data? No. The extension does not store images or track browsing history. 5) Why doesn’t it work on some images? Some images are protected/embedded or blocked by the website, so they may not be accessible for right-click image search.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
13 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from ecomstal.official
Popular in Tools
- Montara Chrome Extension639,000,000 users
- 迅雷下载支持85,000,000 users
- Claude21,000,000 users
- ApexGuard VPN Proxy for Chrome10,000,000 users
- Tenelk VPN10,000,000 users