Is Flipkart Image Downloader safe?

Medium risk

Flipkart Image Downloader opens a background affiliate tab to sovrn.co when users download images.

When a user clicks an image download button on a Flipkart or Flixcart page, the extension opens an inactive tab to https://sovrn.co/1lmqghu before or alongside the download. This affiliate-tab behavior is rate-limited to once per 24 hours and the code does not explicitly add page DOM, cookies, or product URLs to the sovrn.co request.

كوبوناتيv1.0Chrome Web Store
46Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Downloads open a background affiliate tab to sovrn.co once per day.

Clicking per-image or download-all controls makes Flipkart Image Downloader open a background tab to sovrn.co before the download starts.

That affiliate request can expose your IP and headers; it's gated to once per 24 hours.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-506
Source
Dynamic sandbox
What actually happens
You did this

The user clicks a per-image or download-all button.

The extension did this

The extension opens an inactive affiliate tab to sovrn.co before starting the requested download, subject to a 24-hour gate.

Captured request
GEThttps://sovrn.co/1lmqghu
Fields exposed by the affiliate request
  • Your IP address
    203.0.113.42 (illustrative)

    The remote affiliate endpoint can use this network address to associate the request with your connection.

  • Your browser request headers
    User-Agent: Chrome/125.0 (illustrative)

    Headers such as user agent and language can describe your browser environment when the tab opens.

What it can do

Permissions this extension asks for, as declared in version 1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Act on the current tab, but only after you click the extension

    activeTab

  • Start, monitor and manage your downloads

    downloads

  • See the address and title of every tab you have open

    tabs

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed Flipkart Image Downloader contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • sovrn.co

    Flipkart Image Downloader sends data to sovrn.co. No other extension we have analysed sends data here.

Updated 30 September 2026ohapmkobbgplbkgllfgniomjiiaebibo