[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Autosnipe AI: The Ultimate Automated Memecoin Sniper

Version 2.1.0 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Rating: 4.5 ★ (6 ratings)

Users: 201

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors: This extension has very limited trust indicators with only 201 users and 6 ratings, making it difficult to assess community validation. The lack of clear developer information and company details raises transparency concerns. The extension targets cryptocurrency trading, a space often exploited by malicious actors.

Concerns:

- Extremely broad host permissions (<all_urls>) allow access to all websites you visit, far exceeding what's needed for memecoin trading functionality

- Content scripts inject into sensitive platforms including social media (X.com, Discord, Telegram) and financial trading sites, creating potential for data harvesting

- Low user base and minimal ratings provide insufficient community vetting

- Cryptocurrency-focused extensions are frequent targets for scams and wallet draining attacks

- Access to trading platforms could enable unauthorized transaction manipulation

- No clear privacy policy or security audit information available

Recommendations:

Run this extension in a completely separate Chrome profile isolated from your main browsing and financial accounts. Never use the same profile for banking, email, or storing cryptocurrency wallet information. Consider using a dedicated virtual machine for cryptocurrency trading activities. Monitor your accounts closely for any unauthorized activity. Given the broad permissions and sensitive nature of cryptocurrency trading, consider using established, well-reviewed alternatives with stronger security track records and transparent development teams.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

Security Analysis Details

Host Permissions:

<all_urls>
https://autosnipe.ai/*
https://api.autosnipe.com/*

Embedded URLs (57 total):

http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
https://clients2.google.com/service/update2/crx	https://autosnipe.ai/
https://api.autosnipe.com/	https://dexscreener.com/
https://photon-sol.tinyastro.io/	https://bullx.io/
https://gmgn.ai/	https://neo.bullx.io/
https://pump.fun/coin/	https://axiom.trade/
https://x.com/	https://web.telegram.org/
https://discord.com/	https://pump.fun/
https://autosnipe.ai	https://api.autosnipe.ai
https://autosnipe.ai/sdk/trade-sdk/	https://autosnipe.ai/sniper/
https://autosnipe.ai/?rd=	https://cdn.jsdelivr.net/fontsource/fonts/metropolis@latest/latin-400-normal.woff2
https://cdn.jsdelivr.net/fontsource/fonts/metropolis@latest/latin-400-normal.woff	https://cdn.jsdelivr.net/fontsource/fonts/metropolis@latest/latin-600-normal.woff2
https://cdn.jsdelivr.net/fontsource/fonts/metropolis@latest/latin-600-normal.woff	https://cdn.jsdelivr.net/fontsource/fonts/metropolis@latest/latin-700-normal.woff2
https://cdn.jsdelivr.net/fontsource/fonts/metropolis@latest/latin-700-normal.woff	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
https://autosnipe.ai/sdk/copy-activate-sdk/?activate=true&webview=true	https://autosnipe.ai/copy-activate-sdk
https://autosnipe.ai/test1/copy-activate-sdk	https://autosnipe.ai/test2/copy-activate-sdk
https://autosnipe.ai/test3/copy-activate-sdk	http://www.w3.org/1999/xhtml
http://www.w3.org/2000/xmlns/	http://svgjs.dev
https://svelte.dev/e/effect_in_teardown	https://svelte.dev/e/effect_in_unowned_derived
https://svelte.dev/e/effect_orphan	https://svelte.dev/e/effect_update_depth_exceeded
https://svelte.dev/e/hydration_failed	https://svelte.dev/e/props_invalid_value
https://svelte.dev/e/state_descriptors_fixed	https://svelte.dev/e/state_prototype_fixed
https://svelte.dev/e/state_unsafe_local_read	https://svelte.dev/e/state_unsafe_mutation
https://svelte.dev/e/hydration_mismatch	https://svelte.dev/e/invalid_default_snippet
https://svelte.dev/e/lifecycle_outside_component	https://autosnipe.ai/getting-started
https://autosnipe.ai/feedback?platform=extension	https://autosnipe.ai/sdk/copy-activate-sdk
https://autosnipe.ai/sdk/preset-sdk	https://autosnipe.ai/sdk/trade-sdk
https://autosnipe.ai/sdk/graph-sdk	https://firebase.googleapis.com
https://firebaseinstallations.googleapis.com

Raw Manifest

{
  "name": "Autosnipe AI: The Ultimate Automated Memecoin Sniper",
  "icons": {
    "16": "src/assets/img/logo_16x16.png",
    "32": "src/assets/img/logo_32x32.png",
    "48": "src/assets/img/logo_48x48.png",
    "128": "src/assets/img/logo_128x128.png"
  },
  "action": {
    "default_popup": "src/ui/index.html"
  },
  "omnibox": {
    "keyword": "Solana trading bot,Solana trading platform,Automatic Solana trading,Crypto trading platform"
  },
  "version": "2.1.0",
  "background": {
    "type": "module",
    "service_worker": "service-worker-loader.js"
  },
  "short_name": "Autosnipe",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Autosnipe: The ultimate memecoin sniper for seamless, efficient sniping across platforms like AutoSnipe, BullX, Photon, and more.",
  "content_scripts": [
    {
      "js": [
        "assets/index.ts-loader-Dx7k29QL.js",
        "assets/content.ts-loader-DXYQ6WQj.js"
      ],
      "css": [
        "assets/content-lTzU2lGX.css"
      ],
      "matches": [
        "https://dexscreener.com/*",
        "https://photon-sol.tinyastro.io/*",
        "https://bullx.io/*",
        "https://gmgn.ai/*",
        "https://neo.bullx.io/*",
        "https://pump.fun/coin/*",
        "https://axiom.trade/*",
        "https://x.com/*",
        "https://web.telegram.org/*",
        "https://discord.com/*"
      ]
    }
  ],
  "host_permissions": [
    "<all_urls>",
    "https://autosnipe.ai/*",
    "https://api.autosnipe.com/*"
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "https://axiom.trade/*",
        "https://bullx.io/*",
        "https://dexscreener.com/*",
        "https://discord.com/*",
        "https://gmgn.ai/*",
        "https://neo.bullx.io/*",
        "https://photon-sol.tinyastro.io/*",
        "https://pump.fun/*",
        "https://web.telegram.org/*",
        "https://x.com/*"
      ],
      "resources": [
        "assets/index-eUp5Ndxn.js",
        "assets/index.ts-BQtPfLZK.js",
        "assets/legacy-ID3HPWEW.js",
        "assets/apexcharts.common-Di6_AM_b.js",
        "assets/content.ts-MfJansDp.js"
      ],
      "use_dynamic_url": false
    }
  ]
}

by ✦ Astarte