Tracked campaign: Easy Package Tracker malware

Our analysis confirmed the behaviour described in the threat library entry. Do not install it. Read the analysis and indicators →

Also reported by malext.io

Chrome Web Store Verified

Easy Package Tracker

by [email protected] · 6.0K users
17b6314f-0c7c-52a5-9ecd-3f5d831de2e6 | v1.0.2

Marketplace listing not found

Our last marketplace check could not find this listing in Chrome Web Store. It may have been removed or delisted. Existing installs may still run, but verify the publisher and package source before installing or updating.

Not found on Today
48/ 100
MEDIUM risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
4 months ago
Version
v1.0.2
Artifact
SHA256 A3B…670
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

2 detail rows

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

13 total

Loading network indicators

IoC detail rows are loaded outside the initial page render.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

32
Noisy-finding weight
x1.00
Publisher domain
easypackagetrack.com
Observed
Store verification signal
Limited signal
Limited
Extension portfolio
1
Portfolio

13 evidence rows available.

Finding Categories

2
Network
13
IoC Indicators

Requested Permissions

3 permissions
storage
Low
alarms
Low
https://easypackagetrack.com/*
Low

Security Analysis Summary

Security Analysis Overview

Easy Package Tracker is a Chrome Web Store extension published by [email protected]. Version 1.0.2 has been analyzed by the Risky Plugins security platform, receiving a risk score of 48.09/100 (MEDIUM risk) based on 15 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 15 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Easy Package Tracker is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 6K users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

About This Extension

Easy Package Tracker makes tracking your deliveries effortless by adding a convenient package widget to every page you visit. The extension automatically detects tracking numbers and looks up the correct carrier for you, so you can quickly check package status without copying, pasting, or opening new tabs. It supports UPS, USPS, and FedEx, giving you a simple way to stay on top of your shipments wherever you are on the web. With a lightweight widget that appears right when you need it, Easy Package Tracker helps you track packages faster and with less hassle. You also stay in control — you can snooze the widget when you want it out of the way, or disable it completely at any time. Features: Creates a package tracking widget on every page Automatically detects tracking numbers Auto-identifies supported carriers Works with UPS, USPS, and FedEx Lets you snooze the widget temporarily Lets you disable the widget whenever you want Monetization & Link Disclosure: This extension does not use affiliate programs, affiliate links, referral codes, or affiliate cookies. We do not receive affiliate commissions when users click links, visit websites, or make purchases. Any links shown in the extension are limited to our package-tracking partners and are provided only to support shipment tracking functionality. We collect limited diagnostic data when necessary to operate, maintain, debug, and support the extension. Diagnostic data may include the current tab URL and title where the Easy Package Widget has loaded, extension error logs, browser version, user location, extension version, and timestamps. Diagnostic data is used for troubleshooting, support, security, and service reliability.

Frequently Asked Questions