Is Carre Points safe?

Question

Accepted Answer

Carre Points is critical risk. Code analysis shows that after you press Iniciar in the Carre Points page, the extension opens a Twitch tab, attaches the browser debugging interface to that tab, reads auth-related fields from Twitch integrity and GraphQL traffic, adds your Twitch user ID, and posts those fields to https://carre.hutils.com/points. No captured POST body was available to quote, so the body is not reproduced here.

Is Carre Points safe?

Findings