[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

ShopSavvy

Version 3.1.1 View in Chrome Web Store

Last scanned: about 6 hours ago

Extension Details

Developer: shopsavvy.com

Rating: 3.4 ★ (24 ratings)

Users: 2,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 4 total findings, including 1 high-risk finding.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: notifications

This extension has the notifications permission. Can show notifications.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

alarms
storage
notifications
sidePanel
offscreen
contextMenus

Host Permissions:

https://*/*
http://*/*

Content Security Policy:

extension_pages: script-src 'self'; object-src 'self';

Embedded URLs (337 total):

https://apis.google.com/js/api.js?onload=	https://www.google.com/recaptcha/enterprise.js?render=
https://www.acehardware.com/p/6077372?x429=true	https://www.acehardware.com/departments/outdoor-living/grills-and-smokers/pellet-grills/8016781
https://www.acehardware.com/departments/outdoor-living/grills-and-smokers/pellet-grills/F013870?variationProductCode=8093167	https://www.adorama.com/us1781396.html
https://www.adorama.com/gphero12.html	https://www.adorama.com/gphero13.html
https://www.apple.com/shop/buy-airpods/airpods-4/without-active-noise-cancellation	https://www.apple.com/shop/buy-ipad/ipad-pro/13-inch-display-256gb-space-black-wifi-standard-glass
https://shop.barnesandnoble.com/products/9789374128077?variant=47815265190129	https://shop.barnesandnoble.com/products/9783159622286?variant=46624218087665
https://www.barnesandnoble.com/w/the-let-them-theory-mel-robbins/1146342595?ean=9781401971366	https://www.bestbuy.com/site/-/-.p?skuId=6428142
https://www.bestbuy.com/site/-/-.p?skuId=6577782	https://www.bestbuy.com/site/-/-.p?skuId=6620467
https://www.bhphotovideo.com/c/product/1688835-REG/sony_xr85x95k_85_xr55x90k_bravia_xr.html/specs	https://www.bhphotovideo.com/c/product/1874643-REG/pny_vcg5070t16tfxpb1_o_geforce_rtx_5070_ti.html?kw=PN5070T16OTF&ap=y&smp=Y&BI=E7249
https://www.bhphotovideo.com/c/product/1886559-REG/lg_86qned85aua_aus_qned_evo_ai_qned85a.html?kw=LG86QNED85&ap=y&smpn=&BI=E7249	https://www.booksamillion.com/search?query=
https://www.booksamillion.com/p/Camp/Kayla-Miller/9781328530820	https://www.booksamillion.com/p/Best-Friends/Shannon-Hale/9781250317469
https://www.booksamillion.com/p/Adventure-Time-Complete-Series/John-Dimaggio/K883929664016	https://www.booksamillion.com/p/STAR-WARS-OUTLAWS/alliance-entertainment/F887256115920
https://www.booksamillion.com/p/PRG-DNS-COMBINING-ZORDS-MOSA/alliance-entertainment/F5010993933655	https://www.booksamillion.com/p/Life-Lazy-Susan-Sht-Sandwiches/Jennifer-Welch/9781335550989
https://www.booksamillion.com/p/Oh-Places-Youll-Go/Dr-Seuss/9780679805274	https://www.booksamillion.com/p/LEGO-Architecture-New-York-City/LEGO/F673419247160
http://schema.org/Organization	https://www.chewy.com/dyson-v11-cordless-vacuum-nickelblue/dp/1309798
https://www.chewy.com/oxbow-essentials-chinchilla-deluxe/dp/136069	https://www.chewy.com/nutro-ultra-adult-weight-management/dp/34804
https://www.costco.com/bushnell-tour-v6-shift-rangefinder.product.4000213767.html	https://www.costco.com/apple-airpods-pro-1st-generation-with-magsafe-charging-case.product.100806319.html
https://www.costco.com/snapware-pyrex-18-piece-glass-food-storage-set.product.100358145.html	http://schema.org/Product
https://schema.org/Product	http://schema.org/Offer
https://schema.org/Offer	http://data-vocabulary.org/Product
https://data-vocabulary.org/Product	https://www.dell.com/en-us/shop/sony-ps5-dualsense-edge-wireless-controller-white/apd/ac618777/gaming-gaming-accessories
https://www.dell.com/en-us/shop/netgear-nighthawk-rs300-wi-fi-7-ieee-80211be-ethernet-wireless-router/apd/ad176170/wifi-and-networking	https://www.dell.com/en-us/shop/go-air-pop-true-wireless-earbuds-slate/apd/ab882137/audio
https://www.ebay.com/itm/164374627048	https://www.ebay.com/itm/397559298341
https://www.ebay.com/itm/306475217318?google_free_listing_action=view_item	https://www.freshdirect.com/srch.jsp?searchParam=
https://api.freshdirect.com/	https://www.gamestop.com/collectibles/figures/products/mcfarlane-toys-dc-super-friends-toyman-6-in-retro-action-figure/424622.html
https://www.gamestop.com/consoles-hardware/playstation-5/consoles/products/sony-playstation-portal-remote-player-for-ps5-console---midnight-black/420414.html	https://www.gamestop.com/video-games/playstation-5/products/cronos-the-new-dawn---playstation-5/428663.html
https://www.gianteagle.com/search?q=	https://core.shop.gianteagle.com/api/v2/
https://giantfood.com/search?q=	https://giantfood.com/api/
https://www.hannaford.com/search?q=	https://www.hannaford.com/api/
https://www.homedepot.com/p/5-in-Brushed-Nickel-Metal-Rectangle-Ceiling-Fan-Pull-Chains-2-Pack-813314/315511567	https://www.homedepot.com/p/Royal-Gourmet-Charcoal-Grill-with-Offset-Smoker-in-Black-Plus-A-Cover-CC1830FC/316022133
https://www.homedepot.com/p/DEWALT-16-Gal-6-5-HP-Poly-Wet-Dry-Vacuum-with-Hose-and-Accessories-DXV16PA/305506376	https://www.hy-vee.com/search?q=
https://api.prod.hy-vee.cloud/discover-api/	https://www.iherb.com/pr/one-a-day-men-s-50-advanced-multivitamin-110-gummies/127279?ccode=us&currcode=USD&langcode=en-US&fld=1
https://www.iherb.com/pr/lifeseasons-focus-r-concentration-support-60-veg-capsules/83020?ccode=us&currcode=USD&langcode=en-US&fld=1	https://www.iherb.com/pr/l-oreal-la-palette-112-nude-intense-0-62-oz-17-5-g-discontinued-item/91839
https://www.jcpenney.com/p/ninja-creami-ice-cream-maker/ppr5008219553	https://www.jcpenney.com/p/theragun-mini-portable-massage-gun-black-3rd-generation/ppr5008629964
https://www.jcpenney.com/p/linum-home-textiles-1800tc-wrinkle-resistant-standard-pillowcase-pair/ppr5008683599	https://www.kaleidoscope.co.uk
https://www.kohls.com/product/prd-7884477/mind-reader-air-cloud-memory-foam-seat-cushion.jsp?skuid=70029067	https://www.kohls.com/product/prd-5503339/lifepro-dynaflex-massage-gun.jsp?skuid=29427758
https://www.kohls.com/product/prd-6641812/shine-super-soft-satin-pillowcase-2-pc-set.jsp?skuid=19352599	https://www.kroger.com/search?query=
https://www.lambda-tek.com	https://www.lenovo.com/us/en/p/accessories-and-software/audio/audio_earbuds/78559694
https://www.lenovo.com/us/en/p/accessories-and-software/printers-and-scanners/inkjet-all-in-one-printers/78805893	https://www.lenovo.com/us/en/p/accessories-and-software/audio/headphones/78806913?opi=95576897
https://www.lowes.com/pd/Shark-Shark-POWERDETECT-Upright-Vacuum-with-DuoClean-Detect-Powered-Lift-Away-Self-Cleaning-Brushroll-for-No-Hair-Wrap-Anti-Allergen-Complete-Seal-and-Odor-Neutralizer-Technology-and-XL-Dustcup/5015630893	https://www.lowes.com/pd/Harbor-Breeze-7-5-in-Brushed-Nickel-Metal-Pull-Chain/1000003134

Page 1 of 5

Raw Manifest

{
  "name": "__MSG_extension_name__",
  "icons": {
    "16": "images/icon-16.png",
    "48": "images/icon-48.png",
    "128": "images/icon-128.png"
  },
  "action": {
    "default_icon": {
      "16": "images/toolbar-icon-16.png",
      "32": "images/toolbar-icon-32.png"
    },
    "default_title": "ShopSavvy — Compare prices"
  },
  "omnibox": {
    "keyword": "ss"
  },
  "version": "3.1.1",
  "commands": {
    "toggle-side-panel": {
      "description": "Toggle ShopSavvy Side Panel",
      "suggested_key": {
        "mac": "Command+Shift+S",
        "default": "Ctrl+Shift+S"
      }
    }
  },
  "background": {
    "type": "module",
    "service_worker": "entrypoint-service-worker.js"
  },
  "side_panel": {
    "default_path": "entrypoint-side-panel.html"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_extension_description__",
  "permissions": [
    "alarms",
    "storage",
    "notifications",
    "sidePanel",
    "offscreen",
    "contextMenus"
  ],
  "homepage_url": "https://shopsavvy.com/browser-extension",
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "entrypoint-content-script.js"
      ],
      "run_at": "document_end",
      "matches": [
        "https://*/*",
        "http://*/*"
      ],
      "exclude_matches": [
        "https://shopsavvy.com/*",
        "https://*.shopsavvy.com/*"
      ]
    }
  ],
  "host_permissions": [
    "https://*/*",
    "http://*/*"
  ],
  "manifest_version": 3,
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'self';"
  },
  "web_accessible_resources": [
    {
      "matches": [
        "https://*/*",
        "http://*/*"
      ],
      "resources": [
        "entrypoint-overlay.html",
        "entrypoint-injected-view.html",
        "entrypoint-watched-product-settings.html",
        "*.js",
        "*.css",
        "images/*"
      ]
    }
  ]
}

by ✦ Astarte

ShopSavvy

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Content Security Policy:

Embedded URLs (337 total):

Raw Manifest

Detections

Manifest Findings