Chrome Web Store

UPS Tracking

by [email protected] · 40.0K users · 1.0 rating
c369bc2d-2d09-55c7-a7bd-0e28b49497c8 | v1.0.0.0
53/ 100
MEDIUM risk
Risk verdict
Review before use

Score-based assessment (medium risk, 53/100). No analyst review available.

Analysis record

Analysed
1 months ago
Version
v1.0.0.0
Artifact
SHA256 319…FAD
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

6 detail rows

YARA Rule Matches

4 rules
SeverityRuleHitsFilesMetadata
LOWpostinstall file download 1
src/js/background.js
-
LOWpostinstall crypto operations 1
_metadata/verified_contents.json
-
LOWpostinstall file manipulation 1
src/js/background.js
-
LOWpostinstall network communication 1
src/js/background.js
-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

6 total

Loading network indicators

IoC detail rows are loaded outside the initial page render.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

35
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
3
Portfolio

12 evidence rows available.

Finding Categories

2
Network
6
IoC Indicators

YARA Rules Matched

4 rules
postinstall file download postinstall crypto operations postinstall file manipulation postinstall network communication

Requested Permissions

2 permissions
storage
Low
*://trackingnumbers.org/*
Low

Security Analysis Summary

Security Analysis Overview

UPS Tracking is a Chrome Web Store extension published by [email protected]. Version 1.0.0.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 52.69/100 (MEDIUM risk) based on 12 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 8 finding(s)
  • Low: 4 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

UPS Tracking is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 40K users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

About This Extension

UPS Tracking brings you a blazing-fast, one-step solution for keeping tabs on every UPS delivery—right from your browser by setting your default search to TrackingNumbers.org powered by Yahoo. Install it once and let it go to work automatically: Auto-Detect Tracking Numbers Simply type or paste any UPS code into your address bar and the extension kicks in instantly. Instant Live Tracking With one click, view up-to-the-minute updates on the official UPS site so you always know exactly where your package is and when it’s arriving. Hassle-Free Workflow No more tab juggling or copy-pasting. Enter “UPS 1Z999AA10123456784” or Any Other UPS Tracking # in your search bar and you’re redirected straight to your shipment’s tracking page. Make tracking effortless—install UPS Tracking for Chrome today and spend less time hunting for updates and more time on things that matter. View our Privacy Policy here: https://trackingnumbers.org/privacy.html

Frequently Asked Questions