[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

RevSeller

Version 3.1.19 View in Chrome Web Store

Last scanned: about 9 hours ago

Extension Details

Developer: https://revseller.com/

Rating: 4.8 ★ (102 ratings)

Users: 50,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors:

RevSeller appears to be a legitimate Amazon seller tool with a strong user base of 50,000 users and an excellent 4.8-star rating from 102 reviews. The extension is developed by revseller.com, suggesting it's backed by an established company in the Amazon seller space. The high rating and substantial user base indicate positive user experiences and functionality that delivers value to Amazon sellers.

Concerns:

The primary concern is the identity permission, which allows access to your Google account information - this is rarely necessary for Amazon seller tools and represents a significant privacy risk. The broad host permissions extending across all Amazon domains and images could potentially be exploited to capture sensitive seller data, financial information, or customer details. The extension's access to Amazon Seller Central, where sensitive business and financial data resides, amplifies these risks. While the permissions align with an Amazon seller tool's functionality, the identity permission seems excessive for the stated purpose.

Recommendations:

Consider running this extension in a separate Chrome profile dedicated to Amazon selling activities to isolate potential risks from your main browsing. Before installation, verify the extension's necessity for the identity permission by checking their privacy policy and terms of service. Monitor your Google account activity for any unusual access patterns. Given the extension's strong reputation and user base, the risk may be acceptable for serious Amazon sellers, but casual users should exercise caution.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: identity

This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: *://www.amazon.com/*, *://www.amazon.ca/*, *://*.images-amazon.com/*, https://sellercentral.amazon.com/*. Ensure you trust this extension with access to these sites.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

identity
storage
activeTab
contextMenus
scripting

Host Permissions:

*://www.amazon.com/*
*://www.amazon.ca/*
*://*.images-amazon.com/*
*://revseller.com/*
https://sellercentral.amazon.com/*

Embedded URLs (115 total):

https://clients2.google.com/service/update2/crx	https://sellercentral.amazon.com/hz/fba/profitabilitycalculator/index
https://sellercentral.amazon.com/fba/profitabilitycalculator/index	https://sellercentral.amazon.com/fba/revenuecalculator/index
https://sellercentral.amazon.ca/hz/fba/profitabilitycalculator/index	https://sellercentral.amazon.ca/fba/profitabilitycalculator/index
https://sellercentral.amazon.ca/fba/revenuecalculator/index	https://sellercentral.amazon.com/revcal
https://sellercentral.amazon.ca/revcal	https://sellercentral.amazon.com/product-search/search?q=
https://sellercentral.amazon.ca/product-search/search?q=	https://www.googleapis.com/auth/drive.file
https://sellercentral.amazon.com/	https://github.com/mozdevs/cssremedy/issues/4
https://github.com/tailwindcss/tailwindcss/pull/116	https://bugzilla.mozilla.org/show_bug.cgi?id=190655
https://bugs.chromium.org/p/chromium/issues/detail?id=999088	https://bugs.webkit.org/show_bug.cgi?id=201297
https://bugs.chromium.org/p/chromium/issues/detail?id=935729	https://bugs.webkit.org/show_bug.cgi?id=195016
https://github.com/mozilla/gecko-dev/blob/2f9eacd9d3d995c937b4251a5557d95d494c9be1/layout/style/res/forms.css#L728-L737	https://github.com/tailwindlabs/tailwindcss/issues/3300
https://github.com/mozdevs/cssremedy/issues/14	https://github.com/jensimmons/cssremedy/issues/14#issuecomment-634934210
http://www.w3.org/2000/svg	https://stackoverflow.com/questions/41972761/absolute-position-elements-width-truncates-when-extending-beyond-relative-paren
https://fonts.googleapis.com/css?family=Montserrat:400	https://images-na.ssl-images-amazon.com/images/I/
https://revseller.com/api/	https://dyn.keepa.com/v3/api/
https://mercury.revseller.com/api/	https://sellercentral.amazon.com
https://sellercentral.amazon.	https://sheets.googleapis.com/v4/spreadsheets/
https://sheets.googleapis.com/v4/spreadsheets	https://accounts.google.com/o/oauth2/revoke?token=
https://oauth2.googleapis.com/tokeninfo	https://www.amazon.com/
https://www.amazon.ca/	https://www.target.com/
https://graph.keepa.com/pricehistory.png?domain=	https://keepa.com/#
https://camelcamelcamel.com/product/ASIN	https://www.google.com/search?q=TITLE
https://www.google.com/search?tbm=shop&q=TITLE	https://www.walmart.com/search/?query=TITLE
https://www.ebay.com/sch/i.html?_nkw=TITLE	https://ca.camelcamelcamel.com/product/ASIN
https://www.walmart.ca/search?q=TITLE	https://www.ebay.ca/sch/i.html?_nkw=TITLE
https://sellercentral.amazon.com/gp/help/external/GG5KW835AHDJCH8W	https://sellercentral.amazon.com/gp/help/external/200336920
https://sellercentral.amazon.com/help/hub/reference/external/GABBX6GZPA8MSZGW	https://sellercentral.amazon.com/gp/help/external/G3EDYEF6KUCFQTNM
https://sellercentral.amazon.com/gp/help/external/G202125070	https://sellercentral.amazon.ca/gp/help/external/G201105770
https://sellercentral.amazon.ca/gp/help/external/200336920	https://sellercentral.amazon.ca/gp/help/external/help.html?itemID=201112670
https://sellercentral.amazon.ca/gp/help/external/G200612770	https://sellercentral.amazon.ca/gp/help/external/202125070
https://chromewebstore.google.com/detail/RevSeller/gobliffocflfaekfcaccndlffkhcafhb	https://revseller.com/support
https://www.facebook.com/extensionforamazonsellers	https://www.amazon.com
https://www.amazon.ca	https://www.walmart.
https://sellercentral.amazon.com/help/hub/reference/GABBX6GZPA8MSZGW	https://sellercentral.amazon.ca/help/hub/reference/ABBX6GZPA8MSZGW
https://revseller.com/account	https://revseller.com/account/authorize?update=1
https://revseller.com/account/authorize	https://www.oachallenge.com/
https://images-na.ssl-images-amazon.com	https://graph.keepa.com/pricehistory.png?domain=com&range=365&asin=
https://revseller.com	https://camelcamelcamel.com/product/
https://ca.camelcamelcamel.com/product/	https://docs.google.com/spreadsheets/d/
https://www.amazon.com/product-reviews/	https://www.amazon.

Page 1 of 2

Raw Manifest

{
  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUeqCry4rKwTv8qPGJ0ai+L/k/tczqjNL62lyPViJ5/7mOB90t6DGXdkTcz75jEowghzTOKn0v7J/8CwucaNY7xugm0PUCJgqKs50bTTpFyTfNQPBnj5jywMKXg4xv/zuiI/YeizNQpxdLVTjhg+1VSIAejo9n4p1wCUWUp1iPgxBBVBH7z2UnTU7pNxpCPBk9Cq9fbTIRT/Sy4j+hryBquCoLhYKXB9hR+9qQp9tq44QoL4tzF/XMHAaGJf0BOlYueX+1r+jT+p+ICovORJq2DIeWnPw1C03XwspkbnPyUyNor7GDpPvx2j99yGPwkxYrtn5XeKt1c0ZpqHVuhcJwIDAQAB",
  "name": "RevSeller",
  "icons": {
    "16": "img/icon16.png",
    "24": "img/icon24.png",
    "32": "img/icon32.png",
    "48": "img/icon48.png",
    "64": "img/icon64.png",
    "128": "img/icon128.png",
    "256": "img/icon256.png"
  },
  "action": {
    "default_icon": {
      "16": "img/icon16.png",
      "24": "img/icon24.png",
      "32": "img/icon32.png",
      "48": "img/icon48.png"
    }
  },
  "oauth2": {
    "scopes": [
      "https://www.googleapis.com/auth/drive.file"
    ],
    "client_id": "863249128163-r2kvhcqt70qgtaik8m8pdesv8q903uug.apps.googleusercontent.com"
  },
  "version": "3.1.19",
  "commands": {
    "sidebar-search": {
      "description": "Initiate Sidebar Search"
    }
  },
  "background": {
    "service_worker": "sw_background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Product research tool for third-party Amazon sellers that estimates FBA fees, margin, ROI, and details about Variations.",
  "permissions": [
    "identity",
    "storage",
    "activeTab",
    "contextMenus",
    "scripting"
  ],
  "content_scripts": [
    {
      "js": [
        "/lib/jquery-3.7.1.min.js",
        "/js/content-script-0.js"
      ],
      "run_at": "document_start",
      "matches": [
        "http://*.amazon.ca/*",
        "https://*.amazon.ca/*",
        "http://*.amazon.com/*",
        "https://*.amazon.com/*"
      ]
    },
    {
      "js": [
        "/lib/moment.js",
        "/lib/chart.js",
        "/lib/chartjs-adapter-moment.js",
        "/lib/chartjs-plugin-zoom.js",
        "/lib/stupidtable.modified.js",
        "/js/content-script-1.js"
      ],
      "css": [
        "/css/font.css",
        "/css/amazon.css",
        "/css/amazon-aod.css",
        "/css/rs-form.css",
        "/css/popup-export.css",
        "/css/widgets.css",
        "/css/storefront.css",
        "/css/amazon-serp.css",
        "/css/cs-lists.css",
        "/css/cs-competitive.css"
      ],
      "run_at": "document_end",
      "matches": [
        "http://*.amazon.ca/*",
        "https://*.amazon.ca/*",
        "http://*.amazon.com/*",
        "https://*.amazon.com/*"
      ]
    },
    {
      "js": [
        "/js/content-script-2.js"
      ],
      "run_at": "document_start",
      "matches": [
        "http://*.amazon.ca/*",
        "https://*.amazon.ca/*",
        "http://*.amazon.com/*",
        "https://*.amazon.com/*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "/js/content-script-3.js"
      ],
      "run_at": "document_end",
      "matches": [
        "https://sellercentral.amazon.com/hz/fba/profitabilitycalculator/index*",
        "https://sellercentral.amazon.com/fba/profitabilitycalculator/index*",
        "https://sellercentral.amazon.com/fba/revenuecalculator/index*",
        "https://sellercentral.amazon.ca/hz/fba/profitabilitycalculator/index*",
        "https://sellercentral.amazon.ca/fba/profitabilitycalculator/index*",
        "https://sellercentral.amazon.ca/fba/revenuecalculator/index*"
      ]
    },
    {
      "js": [
        "/js/content-script-4.js"
      ],
      "run_at": "document_end",
      "matches": [
        "https://sellercentral.amazon.com/revcal*",
        "https://sellercentral.amazon.ca/revcal*"
      ]
    },
    {
      "js": [
        "/js/content-script-5.js"
      ],
      "run_at": "document_end",
      "matches": [
        "https://sellercentral.amazon.com/product-search/search?q=*",
        "https://sellercentral.amazon.ca/product-search/search?q=*"
      ]
    }
  ],
  "host_permissions": [
    "*://www.amazon.com/*",
    "*://www.amazon.ca/*",
    "*://*.images-amazon.com/*",
    "*://revseller.com/*",
    "https://sellercentral.amazon.com/*"
  ],
  "manifest_version": 3,
  "content_security_policy": {},
  "web_accessible_resources": [
    {
      "matches": [
        "*://www.amazon.com/*",
        "*://www.amazon.ca/*",
        "*://smile.amazon.com/*",
        "*://smile.amazon.ca/*"
      ],
      "resources": [
        "/img/*",
        "/html/*",
        "/html/storefront.html",
        "/js/inject-*.js",
        "/css/fonts/*"
      ]
    },
    {
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "resources": [
        "/html/sidebar3p.html",
        "/html/lists.html",
        "/css/fonts/*"
      ]
    }
  ]
}

by ✦ Astarte

RevSeller

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (115 total):

Raw Manifest

Detections

Manifest Findings