CRXaminer

[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Version 0.7.10 View in Chrome Web Store

Last scanned: about 17 hours ago

Extension Details

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 2 total findings, including 1 high-risk finding.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage

Host Permissions:

https://www.motorwatch.co.uk/*
*://*.autotrader.co.uk/*
*://heycar.com/uk/autos?*
*://www.motors.co.uk/*
*://www.pistonheads.com/*
*://www.gumtree.com/search?*
*://www.gumtree.com/search*search_category=cars*
*://www.gumtree.com/search*search_category=motorbikes-scooters*
*://www.gumtree.com/cars-vans-motorbikes/motorbikes-scooters*
*://www.gumtree.com/search*search_category=vans*
*://www.gumtree.com/cars-vans-motorbikes/vans*
*://www.gumtree.com/search*search_category=campervans-motorhomes*
*://www.gumtree.com/cars-vans-motorbikes/campervans-motorhomes*
*://www.gumtree.com/p/*
*://www.motorcyclenews.com/bikes-for-sale*
*://www.cinch.co.uk/used-cars*

Embedded URLs (47 total):

https://www.motorwatch.co.uk/api/v1	https://www.motorwatch.co.uk/onboarding
https://www.motorwatch.co.uk/uninstall?browser=Chrome&version=	https://tailwindcss.com
http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
https://clients2.google.com/service/update2/crx	https://www.motorwatch.co.uk/
https://www.autotrader.co.uk/car-search	https://www.autotrader.co.uk/electric-bike-search
https://www.autotrader.co.uk/motorhome-search	https://www.autotrader.co.uk/caravan-search
https://www.autotrader.co.uk/truck-search	https://www.autotrader.co.uk/van-search
https://www.autotrader.co.uk/bike-search	https://www.autotrader.co.uk/farm-search
https://www.autotrader.co.uk/plant-search	https://www.autotrader.co.uk/secure/saved-adverts
https://www.autotrader.co.uk/car-details	https://www.autotrader.co.uk/van-details
https://www.autotrader.co.uk/bike-details	https://heycar.com/uk/autos?
https://www.motors.co.uk/search/car/	https://www.motors.co.uk/car-
https://www.pistonheads.com/buy/search	https://www.pistonheads.com/buy/listing/
https://www.pistonheads.com/account/bookmarks	https://www.gumtree.com/search
https://www.gumtree.com/cars-vans-motorbikes/motorbikes-scooters	https://www.gumtree.com/cars-vans-motorbikes/vans
https://www.gumtree.com/cars-vans-motorbikes/campervans-motorhomes	https://www.gumtree.com/p/
https://www.motorcyclenews.com/bikes-for-sale/	https://www.cinch.co.uk/used-cars/
https://www.cinch.co.uk/used-cars?	https://www.cinch.co.uk/my-profile/favourites
https://fonts.googleapis.com	https://fonts.gstatic.com
https://fonts.cdnfonts.com/css/uk-number-plate	https://discord.gg/T4H57T8qQq
https://www.motorwatch.co.uk/privacy-policy	https://chrome.google.com/webstore/detail/motorwatch-autotrader-pis/cmihhekbihecfajbiokajdiajnffdfpn?hl=en-GB
https://addons.mozilla.org/en-US/firefox/addon/motorwatch-car-price-tracker/	https://www.google-analytics.com/mp/collect
https://www.google-analytics.com/debug/mp/collect	https://developers.google.com/analytics/devguides/collection/protocol/ga4/sending-events?client_type=gtag#recommended_parameters_for_reports
https://developers.google.com/analytics/devguides/collection/protocol/ga4/reference?client_type=gtag#reserved_names

Raw Manifest

{
  "name": "Motorwatch - car price tracker",
  "icons": {
    "16": "images/motorwatch-website-favicon-color.png",
    "48": "images/motorwatch-website-favicon-color.png",
    "128": "images/motorwatch-website-favicon-color.png"
  },
  "action": {
    "default_icon": {
      "16": "images/motorwatch-website-favicon-color.png",
      "48": "images/motorwatch-website-favicon-color.png",
      "128": "images/motorwatch-website-favicon-color.png"
    },
    "default_popup": "popup.html"
  },
  "version": "0.7.10",
  "background": {
    "type": "module",
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Motorwatch - car and bike price tracker AutoTrader UK, Pistonheads, Cinch and MCN",
  "permissions": [
    "storage"
  ],
  "content_scripts": [
    {
      "js": [
        "scripts/autotrader/content.js",
        "scripts/funcs.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.autotrader.co.uk/car-search*",
        "https://www.autotrader.co.uk/electric-bike-search*",
        "https://www.autotrader.co.uk/motorhome-search*",
        "https://www.autotrader.co.uk/caravan-search*",
        "https://www.autotrader.co.uk/truck-search*",
        "https://www.autotrader.co.uk/van-search*",
        "https://www.autotrader.co.uk/bike-search*",
        "https://www.autotrader.co.uk/farm-search*",
        "https://www.autotrader.co.uk/plant-search*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/autotrader/saved.js"
      ],
      "css": [
        "css/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.autotrader.co.uk/secure/saved-adverts*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/funcs.js",
        "scripts/autotrader/details.js",
        "scripts/init.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.autotrader.co.uk/car-details*",
        "https://www.autotrader.co.uk/van-details*",
        "https://www.autotrader.co.uk/bike-details*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/heycar/content.js"
      ],
      "css": [
        "css/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://heycar.com/uk/autos?*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/motors/content.js",
        "scripts/funcs.js"
      ],
      "css": [
        "css/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.motors.co.uk/search/car/*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/funcs.js",
        "scripts/motors/details.js",
        "scripts/init.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.motors.co.uk/car-*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/pistonheads/content.js",
        "scripts/funcs.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.pistonheads.com/buy/search*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/pistonheads/details.js",
        "scripts/init.js",
        "scripts/funcs.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.pistonheads.com/buy/listing/*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/pistonheads/favourites.js"
      ],
      "css": [
        "css/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.pistonheads.com/account/bookmarks*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/gumtree/content.js",
        "scripts/funcs.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.gumtree.com/search*search_category=cars*",
        "https://www.gumtree.com/search*search_category=motorbikes-scooters*",
        "https://www.gumtree.com/cars-vans-motorbikes/motorbikes-scooters",
        "https://www.gumtree.com/search*search_category=vans*",
        "https://www.gumtree.com/cars-vans-motorbikes/vans*",
        "https://www.gumtree.com/search*search_category=campervans-motorhomes*",
        "https://www.gumtree.com/cars-vans-motorbikes/campervans-motorhomes*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/gumtree/details.js",
        "scripts/init.js",
        "scripts/funcs.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.gumtree.com/p/*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/mcn/content.js"
      ],
      "css": [
        "css/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.motorcyclenews.com/bikes-for-sale/*/?*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/mcn/details.js",
        "scripts/init.js"
      ],
      "css": [
        "css/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.motorcyclenews.com/bikes-for-sale/*/*/*/"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/cinch/content.js",
        "scripts/funcs.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.cinch.co.uk/used-cars/*/*",
        "https://www.cinch.co.uk/used-cars/*",
        "https://www.cinch.co.uk/used-cars?*"
      ],
      "all_frames": true,
      "exclude_matches": [
        "https://www.cinch.co.uk/used-cars/*/*/*"
      ]
    },
    {
      "js": [
        "scripts/cinch/details.js",
        "scripts/funcs.js",
        "scripts/init.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.cinch.co.uk/used-cars/*/*/*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/cinch/favourites.js"
      ],
      "css": [
        "css/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.cinch.co.uk/my-profile/favourites*"
      ],
      "all_frames": true
    }
  ],
  "host_permissions": [
    "https://www.motorwatch.co.uk/*",
    "*://*.autotrader.co.uk/*",
    "*://heycar.com/uk/autos?*",
    "*://www.motors.co.uk/*",
    "*://www.pistonheads.com/*",
    "*://www.gumtree.com/search?*",
    "*://www.gumtree.com/search*search_category=cars*",
    "*://www.gumtree.com/search*search_category=motorbikes-scooters*",
    "*://www.gumtree.com/cars-vans-motorbikes/motorbikes-scooters*",
    "*://www.gumtree.com/search*search_category=vans*",
    "*://www.gumtree.com/cars-vans-motorbikes/vans*",
    "*://www.gumtree.com/search*search_category=campervans-motorhomes*",
    "*://www.gumtree.com/cars-vans-motorbikes/campervans-motorhomes*",
    "*://www.gumtree.com/p/*",
    "*://www.motorcyclenews.com/bikes-for-sale*",
    "*://www.cinch.co.uk/used-cars*"
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "images/motorwatch-website-favicon-color.png",
        "images/motorwatch-logo.png",
        "images/motorwatch-logo-black-145.png",
        "images/vrm-input-icon.svg",
        "images/MotorlyCarFinanceLg.png",
        "images/motorly-small.png"
      ]
    }
  ]
}

by ✦ Astarte