[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Awesome theme for amazon.com

Version 1.72 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Developer: http://www.aliprice.com/

Rating: 3.9 ★ (32 ratings)

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a modest user base with 32 ratings and a 3.9-star rating, indicating some user satisfaction but limited adoption. The association with aliprice.com suggests it may be related to price comparison or shopping tools. However, the lack of detailed developer information and missing technical specifications raises transparency concerns.

Concerns:

- Uses outdated Manifest V2, which has weaker security protections compared to the current V3 standard

- Missing critical technical details including permissions, host permissions, and content scripts, making it difficult to assess the full scope of access

- The theme's connection to aliprice.com suggests potential data collection or price tracking functionality beyond simple theming

- Limited user adoption (only 32 reviews) indicates less community vetting

- No clear update timeline provided, raising questions about ongoing maintenance and security patches

Recommendations:

Consider running this extension in a separate Chrome profile to isolate any potential risks. Before installation, verify what specific permissions the extension requests during the installation process. Look for alternative Amazon theming extensions that use Manifest V3 and have more transparent permission structures. If you proceed with installation, monitor your browsing behavior on Amazon for any unexpected changes or data requests. Consider whether the theming benefits justify the security trade-offs of using an older manifest version.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "app": {
    "urls": [
      "http://www.aliprice.com/"
    ],
    "launch": {
      "web_url": "http://www.aliprice.com/"
    }
  },
  "link": "http://www.aliprice.com/",
  "name": "__MSG_appName__",
  "theme": {
    "colors": {
      "frame": [
        230,
        230,
        230
      ],
      "toolbar": [
        228,
        228,
        228,
        0.6
      ],
      "ntp_link": [
        0,
        0,
        0
      ],
      "ntp_text": [
        0,
        0,
        0
      ],
      "tab_text": [
        0,
        0,
        0
      ],
      "bookmark_text": [
        0,
        0,
        0
      ],
      "ntp_background": [
        255,
        255,
        255
      ],
      "ntp_link_underline": [
        0,
        0,
        0
      ],
      "tab_background_text": [
        0,
        0,
        0
      ]
    },
    "images": {
      "theme_frame": "images/theme_frame.png",
      "theme_toolbar": "images/theme_toolbar.png",
      "theme_ntp_background": "images/theme_ntp_background.jpg",
      "theme_tab_background": "images/theme_tab_background.png"
    },
    "properties": {
      "ntp_background_repeat": "no-repeat",
      "ntp_background_alignment": "middle"
    }
  },
  "version": "1.72",
  "short_name": "Awesome theme for www.aliprice.com",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "default_locale": "en",
  "manifest_version": 2
}

by ✦ Astarte

Awesome theme for amazon.com

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Embedded URLs (2 total):

Raw Manifest

Detections

Manifest Findings