[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Oink for Influencers

Version 6.6.9 View in Chrome Web Store

Last scanned: about 7 hours ago

Extension Details

Developer: https://thelaststopreviewshop.com/

Rating: 5.0 ★ (21 ratings)

Users: 6,000

Context-Aware Verdict

CRITICAL

Overall Risk

Trust Factors:

The extension has a perfect 5.0 rating but with only 21 reviews, which is insufficient for reliable assessment. With 6,000 users, it has moderate adoption but lacks transparency - no clear company information is provided, only a website URL. The developer identity is unclear, and the extension targets influencers working with Amazon's affiliate program, which could be legitimate but requires careful scrutiny.

Concerns:

The extension requests extremely broad permissions that far exceed what's necessary for typical influencer tools. The combination of tabs, downloads, and scripting permissions across multiple major platforms (Amazon, Facebook, Instagram, YouTube) creates significant attack surface. The unsafe WebAssembly execution policy is particularly concerning as it could hide malicious code. Access to sensitive domains like Facebook Business and Instagram Direct messages raises privacy concerns. The broad host permissions essentially give this extension access to monitor and manipulate your entire browsing experience across major e-commerce and social platforms.

Recommendations:

Given the critical risk level, avoid installing this extension on your main browser profile. If you must use it, create a dedicated Chrome profile specifically for influencer activities and limit your browsing to only necessary sites while using it. Regularly monitor your Amazon affiliate account and social media accounts for unauthorized activity. Consider alternative influencer tools with more limited permissions. The risk-to-benefit ratio appears unfavorable unless this tool provides absolutely essential functionality you cannot obtain elsewhere.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: downloads

This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

HIGH

Unsafe WebAssembly Execution

This extension's Content Security Policy allows 'wasm-unsafe-eval', which permits potentially dangerous WebAssembly code execution. This could be used to hide malicious code or perform CPU-intensive operations.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: *://*.amazon.com/*, https://www.amazon.co.uk/*, https://www.amazon.ca/*, https://www.amazon.com.au/*, https://affiliate-program.amazon.com/*, https://m.media-amazon.com/*, *://*.facebook.com/*, *://business.facebook.com/*, *://*.instagram.com/*. Ensure you trust this extension with access to these sites.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage
tabs
scripting
downloads
downloads.open
windows
alarms

Host Permissions:

*://*.amazon.com/*
https://www.amazon.co.uk/*
https://www.amazon.ca/*
https://www.amazon.com.au/*
https://check-subscription.onrender.com/*
https://affiliate-program.amazon.com/*
https://m.media-amazon.com/*
*://*.facebook.com/*
*://business.facebook.com/*
*://*.instagram.com/*

Content Security Policy:

extension_pages: default-src 'self'; script-src 'self' 'wasm-unsafe-eval'; object-src 'self'; connect-src 'self' https://check-subscription.onrender.com https://affiliate-program.amazon.com https://www.amazon.com https://www.amazon.co.uk https://www.amazon.ca https://www.amazon.com.au; style-src 'self' 'unsafe-inline'; img-src 'self' https://img.youtube.com https://i.ytimg.com;

Embedded URLs (165 total):

https://affiliate-program.amazon.com/connect/api/campaign/products?creatorId=	https://www.amazon.com/dp/
https://www.amazon.ca/dp/	https://www.amazon.co.uk/dp/
https://www.amazon.com.au/dp/	https://affiliate-program.amazon.com/p/connect/request?creatorId=
https://affiliate-program.amazon.com/connect/api/chat/search	https://affiliate-program.amazon.com/p/connect/request?campaignId=
https://api.keepa.com/product	https://affiliate-program.amazon.com/connect/api/chat/messages/list?actorId=
https://affiliate-program.amazon.com/connect/api/chat/message/send	https://affiliate-program.amazon.com/connect/api/campaign/search
https://www.amazon.com/vap/ew/subcomponent/relatedvideos	https://youtu.be/ng_BzyDpVPI
https://oinkforinfluencers.com/how-to-file-a-copyright-infringement-notice-on-amazon/	https://www.facebook.com/groups/amazinginfluencersgroup
https://www.youtube.com/@oinkforinfluencers	https://www.youtube.com/watch?v=S0zHxav4o0s
http://www.w3.org/2000/svg	https://www.amazon.com/create/post?id=amzn1.vse.video.
https://www.amazon.com/shop/	https://www.amazon.com
https://www.amazon.ca	https://www.amazon.co.uk
https://www.amazon.com/gp/css/order-history?...?#time/yoLast30Days/pagination/1/	https://www.amazon.com/gp/css/order-history?...?#time/2025/pagination/1/
https://www.amazon.com/your-orders/orders?timeFilter=year-2025&ref_=ppx_yo2ov_dt_b_filter_all_y2025	https://www.amazon.com/live/video/
https://www.youtube.com/@amazinginfluencers1	https://www.facebook.com/amazinginfluencers
https://www.youtube.com/watch?v=	https://img.youtube.com/vi/
https://oinkforinfluencers.com/book-a-consult/	http://www.oinkforinfluencers.com
https://affiliate-program.amazon.com	https://affiliate-program.amazon.com/connect/api/collaboration/search
https://affiliate-program.amazon.com/connect/api/campaign/accept	https://youtu.be/aGX-5xIHn3o
https://www.amazon.com/creatorhub/manage?page=	https://www.amazon.com/vdp/
https://www.amazon.com/create/api/shoppable-media	https://www.amazon.ca/create/post?
https://www.amazon.co.uk/create/post?	https://www.amazon.com/creatorhub/video/
https://m.media-amazon.com/images/S/vse-vms-transcoding-artifact-us-east-1-prod/	https://www.amazon.
https://www.amazon.ca/shop/	https://www.amazon.co.uk/shop/
https://www.amazon.com/gp/product/	https://www.amazon.com/
https://smile.amazon.com/dp/	https://smile.amazon.com/gp/product/
https://smile.amazon.com/	https://affiliate-program.amazon.com/connect/api/chat/get?maxSize=100
https://affiliate-program.amazon.com/	https://youtu.be/a-ih8ECwl5U
https://amazon.com/shop/teststore	https://youtube.com/watch?v=test123
https://amazon.com/dp/TEST123	https://youtu.be/HQ4g4dVBGrs
https://amazon.com/dp/	https://youtu.be/KfuZDZ74WsE
https://studio.youtube.com/channel/	https://studio.youtube.com
https://studio.youtube.com/channel/YOUR_ID_WILL_BE_HERE	https://oinkforinfluencers.com/extension/
https://www.amazon.com/create/post	https://www.amazon.com/create/collection
https://www.amazon.com/create/post?ref=exp_inf_cs_	https://www.amazon.com/create/collection?ref=exp_inf_cs_
https://www.amazon.com.au	https://www.amazon.com.au/create/post?
https://www.amazon.com/create/post?id=	https://www.amazon.com/manage-content
https://www.amazon.com/manage-content/api/get-content-list	https://www.amazon.com/manage-content?ref=ive_cp
https://affiliate-program.amazon.com/reporting/top-products?sortBy=EARNINGS&dateRangeFilterName=LAST30DAYS&reportType=ASIN&startIndex=	https://affiliate-program.amazon.com/p/reporting/overview
https://unpkg.com/@ffmpeg/core@0.12.2/dist/ffmpeg-core.js	https://clients2.google.com/service/update2/crx

Page 1 of 3

Raw Manifest

{
  "name": "Oink for Influencers",
  "action": {
    "default_icon": {
      "16": "icons/icon16.png",
      "48": "icons/icon48.png",
      "128": "icons/icon128.png"
    },
    "default_popup": "popup.html",
    "default_title": "Oink for Influencers"
  },
  "version": "6.6.9",
  "background": {
    "service_worker": "download-handler.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Fetch and check ASINs for campaigns + product analytics, and display price, sales, and commission data for Amazon products.",
  "permissions": [
    "storage",
    "tabs",
    "scripting",
    "downloads",
    "downloads.open",
    "windows",
    "alarms"
  ],
  "content_scripts": [
    {
      "js": [
        "emailAuth.js",
        "subscription-manager.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*.amazon.com/*",
        "*://*.amazon.ca/*",
        "*://*.amazon.co.uk/*",
        "*://*.amazon.com.au/*",
        "https://affiliate-program.amazon.com/*",
        "*://*.media-amazon.com/*",
        "https://check-subscription.onrender.com/*"
      ]
    },
    {
      "js": [
        "custom-search.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*.amazon.com/*",
        "*://*.amazon.ca/*",
        "*://*.amazon.co.uk/*",
        "*://*.amazon.com.au/*",
        "https://affiliate-program.amazon.com/*"
      ]
    },
    {
      "js": [
        "mainfetch-storage.js",
        "content.js"
      ],
      "matches": [
        "https://www.amazon.com/dp/*",
        "https://www.amazon.ca/dp/*",
        "https://www.amazon.co.uk/dp/*",
        "https://www.amazon.com.au/dp/*",
        "https://affiliate-program.amazon.com/p/connect/requests*",
        "https://www.amazon.com/shop/*",
        "https://www.amazon.com/your-orders*",
        "https://www.amazon.com/*",
        "https://www.amazon.ca/*",
        "https://www.amazon.co.uk/*",
        "https://www.amazon.com.au/*"
      ]
    },
    {
      "js": [
        "onboarding.js"
      ],
      "run_at": "document_end",
      "matches": [
        "https://www.amazon.com/*",
        "https://affiliate-program.amazon.com/*",
        "*://*.media-amazon.com/*",
        "https://*.amazon.com/*"
      ]
    },
    {
      "js": [
        "brandmessaging.js",
        "redx.js"
      ],
      "run_at": "document_end",
      "matches": [
        "https://affiliate-program.amazon.com/*"
      ]
    },
    {
      "js": [
        "mainfetch-storage.js",
        "redx.js",
        "brandmessaging.js"
      ],
      "run_at": "document_end",
      "matches": [
        "https://www.amazon.com/shop/*",
        "https://www.amazon.ca/shop/*",
        "https://www.amazon.co.uk/shop/*",
        "https://www.amazon.com.au/shop/*"
      ]
    },
    {
      "js": [
        "mainfetch-storage.js",
        "campaign-link-tracker.js",
        "popup.js",
        "brandmessaging.js",
        "content-gap.js",
        "content-earnings.js",
        "orderhistorycontentgap.js",
        "copyright-audit.js",
        "collabs.js",
        "low-performing-videos.js",
        "investment-profile.js",
        "facebook-deal-post.js"
      ],
      "run_at": "document_end",
      "matches": [
        "*://*.amazon.com/*",
        "*://*.amazon.ca/*",
        "*://*.amazon.co.uk/*",
        "*://*.amazon.com.au/*"
      ]
    },
    {
      "js": [
        "redx.js",
        "title-snippets.js",
        "thumbnail-editor.js"
      ],
      "run_at": "document_start",
      "matches": [
        "https://www.amazon.com/create/post*",
        "https://www.amazon.ca/create/post*",
        "https://www.amazon.co.uk/create/post*",
        "https://www.amazon.com.au/create/post*"
      ]
    },
    {
      "js": [
        "redx.js"
      ],
      "run_at": "document_start",
      "matches": [
        "https://www.amazon.com/create/collection*",
        "https://www.amazon.ca/create/collection*",
        "https://www.amazon.co.uk/create/collection*",
        "https://www.amazon.com.au/create/collection*"
      ]
    },
    {
      "js": [
        "mainfetch-storage.js",
        "brandmessaging.js",
        "product-opportunities.js",
        "investment-profile.js",
        "redx.js"
      ],
      "run_at": "document_end",
      "matches": [
        "https://affiliate-program.amazon.com/p/connect/requests*"
      ]
    },
    {
      "js": [
        "mainfetch-storage.js",
        "brandmessaging.js",
        "creator-request-opportunities.js",
        "product-opportunities.js",
        "investment-profile.js"
      ],
      "run_at": "document_end",
      "matches": [
        "https://affiliate-program.amazon.com/p/connect/request*"
      ]
    },
    {
      "js": [
        "product-opportunities.js",
        "investment-profile.js"
      ],
      "run_at": "document_end",
      "matches": [
        "https://affiliate-program.amazon.com/deals-hub*"
      ]
    },
    {
      "js": [
        "oinkers-chatbot.js"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://www.amazon.com/*/dp/*"
      ]
    },
    {
      "js": [
        "youtube-upload.js",
        "us-product-button.js"
      ],
      "run_at": "document_end",
      "matches": [
        "https://www.amazon.com/create/post*"
      ]
    },
    {
      "js": [
        "mainfetch-storage.js",
        "youtube-studio.js",
        "youtube-studio-channel.js"
      ],
      "run_at": "document_end",
      "matches": [
        "https://studio.youtube.com/*"
      ]
    },
    {
      "js": [
        "emailAuth.js",
        "subscription-manager.js",
        "unifiedcheck.js",
        "facebook-insert-menu.js"
      ],
      "run_at": "document_end",
      "matches": [
        "*://business.facebook.com/latest/inbox/*",
        "*://*.facebook.com/*",
        "*://*.instagram.com/direct*"
      ]
    }
  ],
  "host_permissions": [
    "*://*.amazon.com/*",
    "https://www.amazon.co.uk/*",
    "https://www.amazon.ca/*",
    "https://www.amazon.com.au/*",
    "https://check-subscription.onrender.com/*",
    "https://affiliate-program.amazon.com/*",
    "https://m.media-amazon.com/*",
    "*://*.facebook.com/*",
    "*://business.facebook.com/*",
    "*://*.instagram.com/*"
  ],
  "manifest_version": 3,
  "content_security_policy": {
    "extension_pages": "default-src 'self'; script-src 'self' 'wasm-unsafe-eval'; object-src 'self'; connect-src 'self' https://check-subscription.onrender.com https://affiliate-program.amazon.com https://www.amazon.com https://www.amazon.co.uk https://www.amazon.ca https://www.amazon.com.au; style-src 'self' 'unsafe-inline'; img-src 'self' https://img.youtube.com https://i.ytimg.com;"
  },
  "web_accessible_resources": [
    {
      "matches": [
        "*://*.amazon.com/*",
        "https://affiliate-program.amazon.com/*",
        "*://*.facebook.com/*",
        "*://business.facebook.com/*",
        "*://*.instagram.com/*"
      ],
      "resources": [
        "mainfetch-storage.js",
        "copyright-audit.js",
        "pro-check-asins.js",
        "low-performing-videos.js",
        "product-cross-check.js",
        "custom-search.js",
        "page-interceptor.js",
        "video-repurpose.js",
        "storefront-performance.js",
        "product-target-profile.js",
        "duplicate-listing-tracker.js",
        "ccr.js",
        "content-earnings.js",
        "thumbnail-templates/*",
        "icons/*"
      ]
    }
  ]
}

by ✦ Astarte

Oink for Influencers

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Content Security Policy:

Embedded URLs (165 total):

Raw Manifest

Detections

Manifest Findings