Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: taoxiaoxia

CRITICAL RISKRemoved from Chrome Web Store

taoxiaoxia

ID: khfgffgocnbjegbnpgdhmkemeiadklip

Could be malicious

Supported Languages

🇨🇳Chinese (Simplified)

Extension Info & Metadata

Status

Removed

Version

1.0.1

Size

1.06 MB

Rating

0.0/5

Reviews

Users

Type

Extension

Updated

Feb 2, 2023

Publisher Contextual Analysis

Author: 萌啦科技View Profile
Privacy: Privacy Policy
Country: CN
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: 坑田大街32号 Guangzhou Shi, Guangdong Sheng 510700 CN
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

35,897

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Taoxiaoxia is the effective tool for shopee operation

Shopee platform operation plug-in, improve operation efficiency, cover eight major sites around the world, effectively improve operation efficiency, and solve the problem of sellers' lack of data support in the operation process 1. Product data, including visitor flow, product conversion rate, sales growth rate, sales volume, etc 2. Data trend, commodity price trend, sales volume in the past 30 days, sales volume in the past 30 days, more analytical in the form of curve chart 3.Support core functions such as viewing massive Shope product data, data trends, and searching for funds by image Shopee平台操作插件，提高运营效率，覆盖全球八大网站，有效提高运营效率，并解决卖家在运营过程中缺乏数据支持的问题 1. 产品数据，包括访客流量、产品转化率、销售增长率、销售额等 2. 数据走势、商品价格走势、近30天的销售量、近30天的销售量，多以曲线图的形式进行分析 3. 支持查看海量Shope产品数据、数据趋势、图片搜索等核心功能

User Growth

Showing data from Jan 17, 2023 to Jan 28, 2024

Versions

-18.18%(-4 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 0 ratings

Average Rating

Current: 0.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High4

Medium1

Low1

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0 Code review	7

Extension Version	Code Review Findings
1.0.0	7

Files with findings

4 distinct paths — top paths by unique finding count:

js/background.js3
js/utils.js2
js/injected.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	js/background.js (line 1457)	The background service worker exfiltrates scraped Shopee item, shop, SKU, and user-session data to a third-party server at shopee.mobduos.com — not a Shopee-owned domain despite the deceptive subdomain. Data from the …	1.0.0
2	Code Injection	high	js/utils.js (line 7)	The content script injects injected.js (and detail.js) into the page's main world via a <script> tag so it runs with page privileges and can override native fetch/XHR, then removes the tag to hide traces. It then brid…	1.0.0
3	Credential Theft	high	js/background.js (line 1426)	The extension maintains its own account system with loginAccount/createAccessToken/resetPassword/registerUser endpoints on shopee.mobduos.com and stores a Bearer token in chrome.storage.local. Credentials and persiste…	1.0.0
4	Network Interception	high	js/injected.js (line 5)	The injected page-world script monkey-patches both window.fetch and XMLHttpRequest.prototype.open to clone every successful response, parse the JSON body, and postMessage it back to the extension. This is a broad netw…	1.0.0
5	Unauthorized Data Collection	high	js/utils.js (line 48)	Intercepted Shopee internal API responses (item details, shop search, product listings, recommendations) are filtered by URL regex and forwarded out of the page. Harvesting competitor/seller product data from another …	1.0.0
6	Privilege Escalation	medium	manifest.json (line 79)	The manifest declares host_permissions for every URL (:///*) even though all content scripts and externally_connectable entries are restricted to Shopee/xiapibuy domains. This over-broad host grant lets the backgrou…	1.0.0
7	Obfuscation	low	js/background.js (line 1004)	Two occurrences of eval("require(...)") appear inside bundled crypto helpers (lines 1004 and 1229). While these are likely UMD fallbacks from js-md5/js-sha1, eval() invocations in a service worker bypass CSP static an…	1.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


fontello.com	-	http://fontello.com
github.com	/zloirock/core-js/blob/v3.21.1/LICENSE	https://github.com/zloirock/core-js/blob/v3.21.1/LICENSE
github.com	/zloirock/core-js	https://github.com/zloirock/core-js
github.com	/emn178/js-md5%7D	https://github.com/emn178/js-md5}
github.com	/emn178/js-sha1%7D	https://github.com/emn178/js-sha1}
shopee.mobduos.com	/api/shopee-report-service/pro	https://shopee.mobduos.com/api/shopee-report-service/pro
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license
js.foundation	-	https://js.foundation/

Showing 1 to 10 of 60 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


127.0.0.1	IPv4	-

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

taoxiaoxia

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating