Chrome Web Store
2Versions
1Code reviewed

Do not install

Code review: critical (v4.0.1)

Our reviewer read version 4.0.1 of this extension and confirmed malicious behaviour. 1 security finding documented below. Do not install it. Remove it if you already have it.

13 indicators in this extension

13 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Walmart Search By Image is rated malicious by Extension Auditor. Our code review reported 1 finding (1 critical), led by tracking. Its permissions mean it can read and change data on all websites.

Key findings

  • Critical

    Tracking

    The content script silently rewrites every Walmart product link (any href containing / on [domain withheld] or [domain withheld]) to redirect through the third-party affiliate tracker `[domain withheld]`, earning the extension author commissions on all user purchases without any user awareness or consent. A MutationObserver ensures dynamically loaded links (infinite scroll, 'More to love' sections) are continuously hijacked. This behavior is entirely absent from the CWS listing description, the privacy policy, and the publisher's CWS-disclosed data-collection categories — it is covert financial fraud against users.

Analyst notes

(lines 1-57) is unambiguously malicious: it silently rewrites every Walmart product-page link ( / URLs on [domain withheld] and [domain withheld]) to route through the affiliate tracking domain `[domain withheld]`, generating undisclosed commissions for the publisher on all user purchases. The code's own comment reads 'Content script to convert related product links to affiliate links' and a MutationObserver ensures newly-loaded links (infinite scroll, dynamic content) are also hijacked. This behavior is never disclosed in the CWS listing (described only as an image search tool), the privacy policy, or the CWS data-collection declaration. The internal IoC note explicitly cites a [domain withheld] report on hidden affiliate hijacking for this extension, the publisher has 19% malicious extensions across their portfolio, and the permhash cluster shows 26% malicious peers — all three signals corroborate rather than contradict the malicious classification.

Walmart Search By Image

Walmart Search By Image Chrome extension security report

ID: mcaihdkeijgfhnlfcdehniplmaapadgb

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
4.0.2
Size
0.04 MB
Rating
0.0/5
Reviews
0
Users
44
Type
Extension
Updated
May 15, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
20extensions
All still listed

Publisher Contextual Analysis

Author
ecomstal.official
Country
BD
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
House: 1034, Avenue: 8, Mirpur DOHS Dhaka 1216 BD
Website
Visit
Extensions
20
Active
20
Obsolete
0
Listed
20
Unlisted
0
Users
476

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3

Install growth

Item
Type
Severity
Description
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

13 indicators in this extension

13 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Right-click any image to search on Walmart! Find products fast and dropship easily with this powerful image search tool.

Read the publisher’s full description

Find Products on Walmart Using Any Image (One Right-Click) Walmart Search by Image helps you find similar products on Walmart using any image from the web. Simply right-click an image and select “Search on Walmart”—the extension opens a new tab and starts the search instantly. Perfect for product research, deal hunting, dropshipping sourcing, and finding matching items faster. ⭐ Key Features ✅ Right-Click “Search on Walmart” Adds a context-menu option to search an image directly on Walmart. ✅ Works on Most Websites Use images from online stores, ads, social media, or competitor pages. ✅ Faster Product Discovery Quickly find similar products and alternative listings on Walmart. ✅ Lightweight & Simple No setup needed—install and start using right away. ✅ Privacy-Friendly Only uses the image you choose when you trigger the search action. 🧠 How to Use ➜ Find any image on the web ➜ Right-click the image ➜ Select “Search on Walmart” ➜ View results in a new tab 🔒 Privacy This extension does not collect, store, or sell personal data. It only initiates a search when you use the context-menu option. 🤝 Affiliate Disclosure Some links shown in the extension (or its pages) may be affiliate links. If you click and make a purchase, we may earn a commission at no extra cost to you. This helps support development and maintenance. ✅ FAQs 1. Do I need to download the image first? No—just right-click the image and choose “Search on Walmart.” 2. Does it work on any website? It works on most sites where images can be right-clicked, but some sites restrict image access or disable right-click. 3. Where does the search open? It opens the Walmart search in a new tab. 4. Does it store my images or browsing data? No. The extension does not store images or track browsing history. 5. Why doesn’t it work on some images? Some images are protected/embedded or blocked by the website, so they may not be accessible for right-click image search.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
13

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

13 indicators in this extension

13 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
4.0.2
Latest
0.04 MBCaution—
30dd59b55295969efa42263f25f881654b4e2887b376b3359e777133e33caca8
4.0.1
0.04 MBMalicious0
30dd59b55295969efa42263f25f881654b4e2887b376b3359e777133e33caca8
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Store rankings

Where this extension appears in store category, collection and keyword rankings.