[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

BOOKDEALORNOBOOKDEAL

Version 2.6.7 View in Chrome Web Store

Last scanned: about 17 hours ago

Extension Details

Rating: 3.5 ★

Users: 4,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a modest user base of 4,000 users with a 3.5-star rating, suggesting moderate adoption but mixed user satisfaction. However, several concerning trust factors emerge: the extension name "BOOKDEALORNOBOOKDEAL" appears unprofessional, there's no visible author or developer information provided, and the missing last updated date raises questions about maintenance and support.

Concerns:

The extension requests access to an unusually broad range of book-related websites including Amazon domains across multiple countries, textbook retailers, and book trading platforms. While the storage permission aligns with its apparent book deal comparison functionality, the extensive host permissions create a large attack surface. The lack of developer transparency is particularly concerning for an extension that operates across numerous e-commerce sites where users handle financial transactions. The unprofessional naming convention and missing metadata suggest this may not be from an established, reputable developer.

Recommendations:

Consider running this extension in a separate Chrome profile to isolate it from your primary browsing data and other extensions. Before installation, verify the extension's legitimacy by checking user reviews for specific functionality descriptions and potential issues. Monitor your browsing behavior on book-related sites after installation for any unusual activity. Given the broad permissions and trust concerns, you might want to explore alternative book price comparison tools from more established developers with better transparency and higher ratings.

Findings

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage
scripting
*://www.amazon.com/*
*://*.membercentral.net/*

Embedded URLs (14 total):

https://www.amazon.com/gp/aod/ajax/ref=aod_f_new?filters=%257B%2522all%2522%253Atrue%252C%2522new%2522%253Atrue%257D&condition=used&asin=	https://www.amazon.com/gp/product/ajax/aodAjaxMain/ref=aod_f_new?filters=%257B%2522all%2522%253Atrue%252C%2522new%2522%253Atrue%257D&condition=used&asin=
https://www.amazon.com/gp/product/ajax/aodAjaxMain/ref=aod_f_primeEligible?filters=%257B%2522all%2522%253Atrue%252C%2522collectible%2522%253Atrue%252C%2522usedAcceptable%2522%253Atrue%252C%2522usedGood%2522%253Atrue%252C%2522usedLikeNew%2522%253Atrue%252C%2522usedVeryGood%2522%253Atrue%252C%2522primeEligible%2522%253Atrue%257D&condition=used&asin=	https://membercentral.net/api/ext/data/bdnbddebug
https://www.amazon.com/gp/aod/ajax/ref=aod_f_usedAcceptable?filters=%257B%2522all%2522%253Atrue%252C%2522usedGood%2522%253Atrue%252C%2522usedLikeNew%2522%253Atrue%252C%2522usedVeryGood%2522%253Atrue%252C%2522usedAcceptable%2522%253Atrue%257D&condition=used&asin=	https://www.abebooks.com/servlet/SearchResults?isbn=
https://www.biggerbooks.com/search-results?terms=	https://www.textbookrush.com/marketplace/books/
https://www.textbookx.com/book/	https://www.biblio.com/
https://www.campusbooks.com/search/	http://openexchangerates.github.io/accounting.js
https://clients2.google.com/service/update2/crx	https://membercentral.net

Raw Manifest

{
  "name": "BOOKDEALORNOBOOKDEAL",
  "icons": {
    "16": "icons/icon16.png",
    "48": "icons/icon48.png",
    "128": "icons/icon128.png"
  },
  "author": "BOOKDEALORNOBOOKDEAL",
  "version": "2.6.7",
  "background": {
    "service_worker": "chrome/content/background.js"
  },
  "short_name": "BOOKDEALORNOBOOKDEAL",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "description.",
  "permissions": [
    "storage",
    "scripting",
    "*://www.amazon.com/*",
    "*://*.membercentral.net/*"
  ],
  "homepage_url": "https://membercentral.net",
  "browser_action": {
    "default_icon": {
      "16": "icons/icon16.png",
      "48": "icons/icon48.png"
    },
    "default_title": "Default title."
  },
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "chrome/content/jquery.min.js",
        "chrome/content/accounting.min.js",
        "chrome/content/content.js"
      ],
      "css": [
        "chrome/content/style.css"
      ],
      "run_at": "document_start",
      "matches": [
        "*://membercentral.net/*",
        "*://www.membercentral.net/*",
        "*://*.booktrades.biz/*",
        "*://*.amazon.com/*",
        "*://*.amzn.com/*",
        "*://*.amazon.co.uk/*",
        "*://*.amazon.de/*",
        "*://*.amazon.fr/*",
        "*://*.amazon.it/*",
        "*://*.amazon.ca/*",
        "*://*.amazon.com.mx/*",
        "*://*.amazon.es/*",
        "*://*.amazon.co.jp/*",
        "*://*.amazon.in/*",
        "*://*.amazon.com.br/*",
        "*://*.amazon.nl/*",
        "*://*.amazon.com.au/*",
        "*://*.textbookrush.com/*",
        "*://*.textbookx.com/*",
        "*://*.abebooks.com/*",
        "*://*.alibris.com/*",
        "*://*.biblio.com/*",
        "*://*.chegg.com/*",
        "*://*.ecampus.com/*",
        "*://*.valorebooks.com/*",
        "*://*.campusbooks.com/*",
        "*://*.booksrun.com/*"
      ],
      "all_frames": true
    }
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "*://*.amazon.com/*",
        "*://*.ebay.com/*",
        "*://*.bookfinder.com/*",
        "*://*.gettextbooks.com/*",
        "*://*.bookscouter.com/*",
        "*://*.amzn.com/*",
        "*://*.amazon.co.uk/*",
        "*://*.amazon.de/*",
        "*://*.amazon.fr/*",
        "*://*.amazon.it/*",
        "*://*.amazon.ca/*",
        "*://*.amazon.com.mx/*",
        "*://*.amazon.es/*",
        "*://*.amazon.co.jp/*",
        "*://*.amazon.in/*",
        "*://*.amazon.com.br/*",
        "*://*.amazon.nl/*",
        "*://*.amazon.com.au/*",
        "*://membercentral.net/*",
        "*://*.booktrades.biz/*",
        "*://www.membercentral.net/*"
      ],
      "resources": [
        "images/*.png"
      ]
    }
  ]
}

by ✦ Astarte