Chrome Web Store

99Versions

1Code reviewed

No malware found

In code review (v5.0.10)

Our reviewer read version 5.0.10 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

32 indicators in this extension

32 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

What our analysis found

Tripkicks, used by 400,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 medium), led by other. It comes from a publisher with 3 extensions and was last updated in August 2026.

Key findings

Medium
Other
The bundled only declares 'storage' permission and host_permissions, while the CWS published manifest includes additional permissions: 'activeTab', 'alarms', 'notifications', 'contextMenus'. The extension may have elevated privileges not visible in the provided source. Without reviewing, it's unclear if these permissions are abused.

Analyst notes

The extension intercepts travel search data on Concur pages and sends it to [domain withheld] for insights, matching its stated purpose. No evidence of exfiltration to third parties or malicious behavior. However, the bundled lacks permissions (activeTab, alarms, notifications, contextMenus) present in the CWS listing, and critical files (,) were not included in the reviewed bundle, limiting full verification.

Tripkicks Chrome extension security report

ID: bmpihmcncmjpdodlbbkhaooolmlmpbpc

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Active

Version

5.3.2

Size

0.63 MB

Rating

4.6/5

Reviews

Users

400,000

Type

Extension

Updated

Aug 25, 2026

Publisher Contextual Analysis

Author: Tripkicks
Privacy: Privacy Policy
Help: Help Center
Country: US
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Address: 299 Broadway Suite 1200 New York, NY 10007-1937 US
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

400,077

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Install growth

User Growth

Showing data from Sep 10, 2023 to Sep 08, 2024

Versions

No change in user count

Compared to 3 months ago

12 versions released in this period

Rating Count

Total: 8 ratings

Average Rating

Current: 4.50 / 5.0-0.50

See plans

React Flow

Internal permhash`dc083731d2…`
No malicious matches

No other extension carries this fingerprint.

Permhash (Mandiant)`158caa04fa…`
No malicious matches

No other extension carries this fingerprint.

Network indicators

32 URLs and 0 IP literals were extracted from this version.

Item	Type	Severity	Description
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://.tripkicks.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://.concursolutions.com/	Host	Medium	Host permission — access limited to this URL pattern.
Early Content Script Execution	Risk Factor	Medium	This extension runs content scripts at document_start.

32 indicators in this extension

32 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

About this extension

Bring actionable insights and guidance into your online booking tool

Read the publisher’s full description

Tripkicks is an add-on to SAP Concur that provides travelers with insights and guidance before they book their trip. Travelers search for a trip, then Tripkicks appears directly within their Concur Travel Search results. Tripkicks Insights Banner appears at the top of the search results and displays trip level information, custom tips, and automatic safety and travel alerts - providing travelers with the most important insights they need to know about their trip. Within each fare below, Tripkicks Supplier Attributes guide travelers to the best options with icons and tips. Supplier Attributes help travelers discover the options that are best for them, and call attention to suppliers with unique offerings or amenities that differentiate them from the others, like hotels that are minority owned or flights on airlines that are most preferred. Tripkicks enables travel managers to influence the decisions of travelers so that they’re aligned with their program priorities, helping them move the needle on things like sustainability, diversity equity and inclusion, program compliance, and cost savings.

User reviews

3.0 out of 5 · 4 most recent reviews

Text reviews

Positive

Negative

This does not need to be an extension in the first place. Embed this functionality directly into Concur, you don't need access to every webpage I browse. This extension does not do anything useful. Other than I guess collecting data for SAP/Concur.

Satish Choudhury·17 Feb 2026

We invite you to join us in our partnership to expand your revenue and grow your chrome extension. Let's explore how we can help you. Learn more at: https://extensionbuysell.com Looking forward to working with you!

Madison Francis·20 Sept 2024

Hello, I hope you're having a splendid day! I am currently seeking opportunities to expand my business operations by investing in extensions with a significant user base, beginning from 50,000 users and up. No matter if your extension has a modest user base or counts its users in the millions, I am interested and ready to negotiate a purchase. If you are in possession of such an extension and looking to turn it into a profit, please consider reaching out to me. We can discuss the price and proceed with a transparent and secure transaction through a trusted escrow service based in the United States. It's great that Google allows the transfer of extension ownership between accounts, so your Google account ownership will remain intact. If you have any needs, please contact us via the following contacts Whatsapp: +1 (248) 896‑8035 Telegram: t.me/harryysandersonn

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

32 indicators in this extension

32 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

Version	Size	Verdict	Findings	Permhash
5.3.2 Latest	0.63 MB	Not scanned	—	158caa04fa2ab71d5affd4040aab68573a015126b3532a8f5661ac6d11ad3079
5.3.1	0.63 MB	Not scanned	—	158caa04fa2ab71d5affd4040aab68573a015126b3532a8f5661ac6d11ad3079
5.0.0	0.62 MB	Not scanned	—	158caa04fa2ab71d5affd4040aab68573a015126b3532a8f5661ac6d11ad3079
5.3.0	0.63 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
5.2.2	0.63 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
5.2.1	0.62 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
5.2.0	0.62 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
5.0.10	0.62 MB	No malware found	0	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
5.0.9	0.62 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
5.0.7	0.62 MB	Not scanned	—	49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7

Showing 1 to 10 of 100 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Workflow & Planning

Adobe Acrobat: PDF edit, convert, sign tools343,000,000 users
Application Launcher For Drive (by Google)98,000,000 users
AdBlock — block ads across the web65,000,000 users
Chrome Remote Desktop41,000,000 users
Adblock Plus - free ad blocker40,000,000 users

No malware found

32 indicators in this extension

What our analysis found

Key findings

Other

Tripkicks Chrome extension security report

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Screenshots & videos

Install growth

User Growth

Rating Count

Average Rating

Threat relationships

Internal permhashdc083731d2…No malicious matches

Permhash (Mandiant)158caa04fa…No malicious matches

Network indicators

Security analysis

Manifest File Security Analysis

32 indicators in this extension

Store listing & files

About this extension

User reviews

User Reviews

Extension files

Network indicators

URLs

32 indicators in this extension

Versions & changes

Version History

Code Diff

Related extensions

More from Tripkicks

Popular in Workflow & Planning

User Growth

Rating Count

Average Rating

User Reviews

Threat relationships

Internal permhashdc083731d2…No malicious matches

Permhash (Mandiant)158caa04fa…No malicious matches

Network indicators

Internal permhash`dc083731d2…`
No malicious matches

Permhash (Mandiant)`158caa04fa…`
No malicious matches

Internal permhash`dc083731d2…`
No malicious matches

Permhash (Mandiant)`158caa04fa…`
No malicious matches