Chrome Web StoreNo malware found
In code review
Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.
380 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Vendoo Crosslist Extension v3, used by 70,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can observe network requests. It comes from a publisher with 2 extensions and was last updated in September 2025.
Analyst notes
The extension's functionality is a cross-listing tool for resellers, requiring broad host permissions and network interception on marketplace domains (e.g., [domain withheld], [domain withheld]) to inject scripts and modify headers for CORS. The provided source code (,,) shows legitimate use of declarativeNetRequest for header manipulation, content scripts for DOM interaction, and Datadog logging proxied through the publisher's own domain ([domain withheld]). No data exfiltration to unauthorized third parties, no obfuscation beyond standard minification, and no evidence of credential theft or phishing. The ML model likely over-emphasized the permission combinations (webRequest, cookies, tabs) which are necessary for the extension's stated purpose. The risk-engine's 'Critical' rating stems from static permission analysis without business context. The publisher's other extension is flagged as malicious, but this extension's code does not exhibit similar behavior.
Vendoo Crosslist Extension v3 Chrome extension security report
ID: mnampbajndaipakjhcbbaihllmghlcdf
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Vendoo, Inc.
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- US
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
- Address
- 11605 Idlewood Rd Silver Spring, MD 20906-4853 US
- Website
- Visit
Screenshots & videos
Install growth
Sensitive Domain Access
This extension has access to the following sensitive domains:
- *://*.facebook.com/*
- https://garage-pictures-0.s3.amazonaws.com/*
- *://*.s3.amazonaws.com/*
- *://*.myshopify.com/*
- *://*.ebay.co.uk/*
- *://*.s3-accelerate.amazonaws.com/*
Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.
Data Exfiltration
Code review completed; no malicious patterns detected for this category.
Unauthorized Data Collection
Code review completed; no malicious patterns detected for this category.
Network Interception
Code review completed; no malicious patterns detected for this category.
Code Injection
Code review completed; no malicious patterns detected for this category.
Credential Theft
Code review completed; no malicious patterns detected for this category.
Obfuscation
Code review completed; no malicious patterns detected for this category.
Tracking
Code review completed; no malicious patterns detected for this category.
Privilege Escalation
Code review completed; no malicious patterns detected for this category.
Phishing
Code review completed; no malicious patterns detected for this category.
Remote Code Loading
Code review completed; no malicious patterns detected for this category.
Other
Code review completed; no malicious patterns detected for this category.
380 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Connect and crosslist to 10+ third party marketplaces with Vendoo!
Read the publisher’s full description
Connect to third party marketplaces The Go-To Crossposting Software for Resellers! Crosspost your items onto multiple marketplaces, manage your inventory and access powerful analytics to take your business to a whole new level. Get started with your existing inventory: Import your listings from existing marketplaces or create your listings from scratch. Crosspost your items to 9 marketplaces: Crosspost your inventory to Poshmark, Mercari, eBay, Facebook Marketplace, and more! Delist & Relist items with just a few clicks: Refresh stale listings into new ones. With Vendoo, delist and relist your items in a matter of seconds with ONLY 2 clicks. Remove sold listings with the click of a button: Did you sell an item that’s listed on multiple marketplaces? No problem, just mark your item as sold in Vendoo and our software will do the rest! Improve your way of selling with Analytics: Access revenue and sales data to better understand your business and take actionable steps towards growing. Get started for free today! This extension allows Vendoo to access and communicate with your marketplaces.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
380 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from Vendoo, Inc.
- Vendoo Marketplace Lister - BETA44 users
Popular in Workflow & Planning
- Adobe Acrobat: PDF edit, convert, sign tools346,000,000 users
- Application Launcher For Drive (by Google)99,000,000 users
- AdBlock — block ads across the web65,000,000 users
- Chrome Remote Desktop41,000,000 users
- Adblock Plus - free ad blocker40,000,000 users