Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Unicorn Smasher

CRITICAL RISKRemoved from Chrome Web Store

Unicorn Smasher

ID: lfmmeekapjbfjachdkgabdaoccfclpaa

Could be malicious

Extension Info & Metadata

Status

Removed

Version

1.0.24.28

Size

1.32 MB

Rating

3.3/5

Reviews

344

Users

142,982

Type

Extension

Updated

Mar 9, 2020

Publisher Contextual Analysis

Author: Amztracker.comView Profile
MX records exist: No
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: No

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

144,322

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Find the perfect product to start dominating on Amazon

OVERVIEW Built by Amztracker, Unicorn Smasher is a free tool for Amazon seller like you that supercharges your Amazon product research. We make it easy for you to pinpoint the perfect product that will fast track you to the top of your niche. Brought to you by the Amazon selling pros at AMZTracker. FEATURES **Real-time, reliable data to give you an inside look at the prices, bestseller ranks, reviews, ratings, estimated sales, and more for any product on Amazon. **Sales and revenue estimates based on real data from tens of thousands of live Amazon products. **Discreet sharing tool that puts your data in a super easy shareable format that doesn’t give away your product, making it easy to get feedback from other sellers. Note: Unicorn Smasher free version only works on the US marketplace(amazon.com). For any questions and for help getting started with your Amazon product research, check out our Help Center at [http://help.unicornsmasher.com/](http://help.unicornsmasher.com/). Download the Unicorn Smasher extension FREE and start your journey to becoming an Amazon power seller! Happy smashing!

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High4

Medium1

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.24.28 Code review	7

Extension Version	Code Review Findings
1.0.24.28	7

Files with findings

3 distinct paths — top paths by unique finding count:

js/OneSignal.js4
js/analytics.js2
js/product.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	js/OneSignal.js (line 232)	The extension enumerates all in-app purchases made by the user via the Google Payments API and transmits the full purchase history (SKUs, currency codes, amounts) to OneSignal's servers. This exfiltrates sensitive fin…	1.0.24.28
2	Unauthorized Data Collection	critical	js/OneSignal.js (line 105)	The extension uses `chrome.identity.getProfileUserInfo()` to obtain the user's Google account ID, then transmits it as `ad_id` to the OneSignal push-notification service along with device fingerprint data (platform, O…	1.0.24.28
3	Data Exfiltration	high	js/OneSignal.js (line 90)	All collected user profile and device data is serialised and POSTed to `https://onesignal.com/api/v1/` via an XHR issued from the privileged background page. This exfiltrates identity and device information to a third…	1.0.24.28
4	Data Exfiltration	high	js/product.js (line 109)	For every Amazon product page the user visits, the content script silently sends the product's domain, category, and sales-rank to `https://www.amztracker.com/unicorn.php`. This leaks granular Amazon browsing behaviou…	1.0.24.28
5	Remote Code Loading	high	js/OneSignal.js (line 159)	The extension registers with Google Cloud Messaging (GCM) using the `gcm` permission and then registers the resulting push-token with OneSignal's servers. This establishes a persistent, remotely-controllable push-noti…	1.0.24.28
6	Tracking	high	js/analytics.js (line 14)	The background script dynamically injects the Facebook Pixel script from `connect.facebook.net` and immediately fires a `PageView` tracking event with pixel ID `112333046037255`. Running a Facebook Pixel in a backgrou…	1.0.24.28
7	Remote Code Loading	medium	js/analytics.js (line 1)	The background script dynamically creates and injects a Google Analytics script tag (`ga.js`) at runtime from an external CDN. Injecting remotely-hosted scripts at runtime is a form of remote code loading that can be …	1.0.24.28

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.unicornsmasher.com	-	http://www.unicornsmasher.com
www.amztracker.com	-	https://www.amztracker.com?utm_source=unicorn
help.unicornsmasher.com	-	http://help.unicornsmasher.com
www.amazon.com	-	http://www.amazon.com
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
ns.adobe.com	/xap/1.0/sType/ResourceRef	http://ns.adobe.com/xap/1.0/sType/ResourceRef#

Showing 1 to 10 of 100 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


5.4.3.1	IPv4	-
1.0.24.28	IPv4	-

2.3 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

لا يعمل في الجزائر It does not work in Algeria

Abdullah Sulaimani·2 Dec 2020

aplicatia trebuie platita in germania nu merge

Ionel Bitica·17 Sept 2020

Doesn't show BSR for most items.

Igor Voitenko·2 Sept 2020

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Unicorn Smasher

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews