Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Wanderlust

CRITICAL RISKRemoved from Chrome Web Store

Wanderlust

ID: hhmdciliopbfjikpifbgaecbpbajhoda

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.0.1

Size

12.29 MB

Rating

5.0/5

Reviews

Users

4,026

Type

Extension

Updated

Sep 22, 2023

Publisher Contextual Analysis

Author: Zone MediaView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

13,026

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Wanderlust, the browser extension that brings the beauty of travel to every new tab you open.

Immerse yourself in the beauty and diversity of our planet, draw inspiration from the adventurous spirit of Amelia Earhart: "Adventure is worthwhile in itself." Wanderlust is your window to the world, igniting your passion for exploration and reminding you that the next adventure is just around the corner. Ready to embark on a virtual travel journey? Download Wanderlust now and let the world's most stunning travel images inspire your browsing experience while staying on track with the date and time at a glance. By clicking "Add to chrome", I accept and agree to installing the Wanderlust extension and setting Chrome™ New Tab search provider to Microsoft Bing as described by the service in terms of use and Privacy Policy.

User Growth

Showing data from Sep 22, 2023 to Nov 07, 2023

Versions

No change in user count

Compared to 2 months ago

1 version released in this period

Rating Count

Total: 1 ratings+1 (0%)

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High1

Medium1

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.1 Code review	3

Extension Version	Code Review Findings
1.0.1	3

Files with findings

3 distinct paths — top paths by unique finding count:

app.af3d0bb9.js1
background.js1
index.html1

S.No.	Category	Severity	File	Summary	Found in Version
1	Tracking	critical	index.html (line 5)	The new tab search form routes all user queries to `usrcunow.com/results.aspx`, a known search hijacker/adware domain, instead of a legitimate search engine. Three hidden fields embed affiliate/publisher tracking iden…	1.0.1
2	Unauthorized Data Collection	high	app.af3d0bb9.js (line 1443)	The extension uses the `topSites` permission to read the user's most-visited URLs and then exfiltrates them to two external third-party servers: every top-site URL is sent to `google.com/s2/favicons?domain_url=<URL>`,…	1.0.1
3	Tracking	medium	background.js (line 7)	On first install, the extension opens a remote Netlify-hosted welcome page (`wanderlust-extension.netlify.app/welcome`). This page is hosted on third-party infrastructure entirely outside the extension package and cou…	1.0.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/2000/svg	http://www.w3.org/2000/svg
unsplash.com	/photos/A5rCN8626Ck	https://unsplash.com/photos/A5rCN8626Ck
unsplash.com	/photos/EnCaUE4QNOw	https://unsplash.com/photos/EnCaUE4QNOw
unsplash.com	/photos/vk4vjTNVrTg	https://unsplash.com/photos/vk4vjTNVrTg
unsplash.com	/photos/t7YycgAoVSw	https://unsplash.com/photos/t7YycgAoVSw
unsplash.com	/photos/78A265wPiO4	https://unsplash.com/photos/78A265wPiO4
unsplash.com	/photos/xAqrT-279UA	https://unsplash.com/photos/xAqrT-279UA
unsplash.com	/photos/MctEgCk1Dm0	https://unsplash.com/photos/MctEgCk1Dm0
unsplash.com	/photos/LEgwEaBVGMo	https://unsplash.com/photos/LEgwEaBVGMo
unsplash.com	/photos/oCdVtGFeDC0	https://unsplash.com/photos/oCdVtGFeDC0

Showing 1 to 10 of 60 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.41.39.39	IPv4	-

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Wanderlust

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version3

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating