[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

BooksAnalyzer

Version 2.1.5 View in Chrome Web Store

Last scanned: about 17 hours ago

Extension Details

Rating: 4.2 ★ (5 ratings)

Users: 4,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors: The extension has a moderate user base of 4,000 users and a decent rating of 4.2 stars, though based on only 5 reviews which is quite limited for meaningful assessment. The lack of clear author and developer information raises transparency concerns. The extension appears to be designed for book analysis across multiple e-commerce platforms, which aligns with its extensive site permissions.

Concerns: The combination of tabs permission with activeTab and scripting permissions creates significant privacy risks, as the extension can monitor and manipulate browser tabs beyond just the active one. The extensive host permissions covering multiple Amazon domains, book trading sites, and marketplaces like eBay means the extension has broad access to sensitive shopping and browsing data. The tabs permission is particularly concerning as it's unnecessary for most book analysis functions and could enable tracking across multiple sites. The limited number of ratings makes it difficult to assess real-world performance and trustworthiness.

Recommendations: Consider running this extension in a separate Chrome profile to isolate it from your main browsing activities. Monitor the extension's behavior carefully, especially when browsing shopping sites. Review what data the extension collects and stores using the storage permission. Consider whether the book analysis functionality is worth the privacy trade-offs, and look for alternative extensions with more restrictive permissions if similar functionality is available elsewhere.

Findings

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Raw Manifest

{
  "name": "BooksAnalyzer",
  "icons": {
    "16": "icons/icon16.png",
    "48": "icons/icon48.png",
    "128": "icons/icon128.png"
  },
  "author": "BOOKSANALYZER",
  "version": "2.1.5",
  "background": {
    "service_worker": "chrome/content/background.js"
  },
  "short_name": "BOOKSANALYZER",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "description.",
  "permissions": [
    "activeTab",
    "tabs",
    "storage",
    "scripting",
    "*://*.amazon.com/*",
    "*://*.amzn.com/*",
    "*://*.amazon.co.uk/*",
    "*://*.amazon.de/*",
    "*://*.amazon.fr/*",
    "*://*.amazon.it/*",
    "*://*.amazon.ca/*",
    "*://*.amazon.com.mx/*",
    "*://*.amazon.es/*",
    "*://*.amazon.co.jp/*",
    "*://*.amazon.in/*",
    "*://*.amazon.com.br/*",
    "*://*.amazon.nl/*",
    "*://*.amazon.com.au/*",
    "*://*.membercentral.net/*",
    "*://*.booktrades.biz/*"
  ],
  "homepage_url": "https://membercentral.net",
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "chrome/content/jquery.min.js",
        "chrome/content/content.js"
      ],
      "run_at": "document_end",
      "matches": [
        "*://*.amazon.com/*",
        "*://*.amzn.com/*",
        "*://*.amazon.co.uk/*",
        "*://*.amazon.de/*",
        "*://*.amazon.fr/*",
        "*://*.amazon.it/*",
        "*://*.amazon.ca/*",
        "*://*.amazon.com.mx/*",
        "*://*.amazon.es/*",
        "*://*.amazon.co.jp/*",
        "*://*.amazon.in/*",
        "*://*.amazon.com.br/*",
        "*://*.amazon.nl/*",
        "*://*.amazon.com.au/*",
        "*://membercentral.net/*",
        "*://www.membercentral.net/*",
        "*://*.booktrades.biz/*"
      ],
      "all_frames": false
    },
    {
      "js": [
        "chrome/content/jquery.min.js",
        "chrome/content/convIsbn.js",
        "chrome/content/abebooks-content.js"
      ],
      "run_at": "document_end",
      "matches": [
        "*://*.membercentral.net/*",
        "*://*.abebooks.com/*"
      ],
      "all_frames": false
    },
    {
      "js": [
        "chrome/content/jquery.min.js",
        "chrome/content/convIsbn.js",
        "chrome/content/alibris-content.js"
      ],
      "run_at": "document_end",
      "matches": [
        "*://*.membercentral.net/*",
        "*://*.alibris.com/*"
      ],
      "all_frames": false
    },
    {
      "js": [
        "chrome/content/jquery.min.js",
        "chrome/content/convIsbn.js",
        "chrome/content/textbookrush-content.js"
      ],
      "run_at": "document_end",
      "matches": [
        "*://*.membercentral.net/*",
        "*://*.textbookrush.com/*"
      ],
      "all_frames": false
    },
    {
      "js": [
        "chrome/content/jquery.min.js",
        "chrome/content/convIsbn.js",
        "chrome/content/biblio-content.js"
      ],
      "run_at": "document_end",
      "matches": [
        "*://*.membercentral.net/*",
        "*://*.biblio.com/*"
      ],
      "all_frames": false
    },
    {
      "js": [
        "chrome/content/jquery.min.js",
        "chrome/content/convIsbn.js",
        "chrome/content/ebay-content.js"
      ],
      "run_at": "document_end",
      "matches": [
        "*://*.membercentral.net/*",
        "*://*.ebay.com/*"
      ],
      "all_frames": false
    }
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "*://*.amazon.com/*",
        "*://*.ebay.com/*",
        "*://*.bookfinder.com/*",
        "*://*.gettextbooks.com/*",
        "*://*.bookscouter.com/*",
        "*://*.amzn.com/*",
        "*://*.amazon.co.uk/*",
        "*://*.amazon.de/*",
        "*://*.amazon.fr/*",
        "*://*.amazon.it/*",
        "*://*.amazon.ca/*",
        "*://*.amazon.com.mx/*",
        "*://*.amazon.es/*",
        "*://*.amazon.co.jp/*",
        "*://*.amazon.in/*",
        "*://*.amazon.com.br/*",
        "*://*.amazon.nl/*",
        "*://*.amazon.com.au/*",
        "*://membercentral.net/*",
        "*://www.membercentral.net/*"
      ],
      "resources": [
        "images/*.png"
      ]
    }
  ]
}

by ✦ Astarte

BooksAnalyzer

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (3 total):

Raw Manifest

Detections

Manifest Findings

https://data.membercentral.net/#	https://clients2.google.com/service/update2/crx
https://membercentral.net