Shopping extensions

Security reviews of 274 Shopping browser extensions, each rated on what its code does when it runs.

  1. pricetip-%E2%80%94-currency-toolt

    Pedanto

    Low

    PriceTip uses remote configuration to redirect matched page clicks through a Pedanto URL.

  2. Rabattcorner

    chrome-webstore-admins

    Clean

    Rabattcorner places cookie-derived cashback state in a page-visible iframe URL on matched merchant sites.

  3. Raiz Rewards

    Raiz Invest

    Low

    Raiz Rewards Browser Extension lets any website trigger a Raiz session API request through its content-script bridge.

  4. vintex-%E2%80%94-your-vinted-bot

    erwann.dev

    Clean

    Vintex sends Vinted-account feature telemetry with the user's Vinted ID to its backend.

  5. AiPrice(AliPrice) Search by Image for AE Beta

    aliprice4

    Low

    AiPrice(AliPrice) Search by Image for AE Beta accepts spoofed webpage messages that can make it open attacker-chosen URLs.

  6. Alerta de ofertas e descontos

    william.wmd

    Medium

    Alerta de ofertas e descontos injects a hidden whos.amung.us pixel and sends shopping page titles to descontosofertas.com.br.

  7. AliSave

    ali-save.com

    High
  8. Amazon Image & Video Downloader - Bulk Tool

    WebStar

    Clean

    Amazon Image & Video Downloader sends Google sign-in email and profile ID to api.webstarue.com for account login.

  9. Cashback Assistant

    Opera Norway AS

    Medium

    Cashback Assistant sends merchant-site visit events to Google Analytics with a persistent extension-generated client ID.

  10. Cashback Comparison

    CashbackHolic.com

    Clean

    Cashback Comparison sends non-prefiltered active tab URLs to CashbackHolic for coupon badge lookups.

  11. Cuponeria: Cupons e cashback em suas compras

    Cuponeria

    Low

    Cuponeria sends shopping-site extension page views to Google Analytics with a persistent extension UUID.

  12. Offer.love - Bank Merchant Card Offer Collector

    Costbell

    Medium

    Offer.love uploads collected bank card-offer details to api.offer.love every six hours.

  13. pan-auto-%D0%BF%D0%BE%D0%BC%D0%BE%D1%89%D0%BD%D0%B8%D0%BA-%D0%B4%D0%BB%D1%8F-enc

    Sergei Mitrofanov

    Low

    PAN AUTO помощник для Encar sends contact form details and selected vehicle context to PAN AUTO's API.

  14. Savely - Price Comparison, Find Lower Prices

    Savely

    Medium

    Savely sends visited domains and, when eligible, full page URLs with a persistent ID to savely-plugin.vercel.app.

  15. Shopify Analyzer

    ixspy.com

    Low

    Shopify Analyzer lets any website display the stored IXSPY account email in the page.

  16. Tiplino: Cashback és kedvezménykuponok

    Tipli

    Medium

    Tiplino reads selected page text chosen by remote rules and sends it to www.tiplino.hu.

  17. Writer Watch

    ReaderScout

    Medium

    Writer Watch embeds a WordPress API authorization key and sends user and book IDs to writerwatch.com.

  18. %D8%A7%D9%84%D9%85%D9%88%D9%81%D8%B1-%D9%85%D9%83%D8%AA%D8%B4%D9%81-%D8%A3%D9%83%D9%88%D8%A7%D8%AF-%D8%A7%D9%84%D8%AE%D8%B5%D9%85

    Almowafir

    Low

    الموفر reports coupon-page views and interactions to Google Analytics with a persistent extension ID.

  19. 1-2-3 Nakup

    ceneje.si

    Clean

    1-2-3 Nakup s Ceneje.si sends search terms, page URLs, and visible result metadata to Ceneje.si.

  20. AliExpress Image Search

    AliChrome

    Low

    AliExpress Image Search opens a hidden affiliate tab on AliExpress checkout and sends saved product image URLs to Thieve.

  21. Amazon Reviews Extractor

    William Anderson

    Clean

    Amazon Reviews Extractor sends sampled Amazon review text and product URLs to its Parse Cloud summary service.

  22. Bitcashback

    bitCashback

    Medium

    Bitcashback uploads stored popup interaction logs with active-tab domains and the logged-in email to bitcashback.net.

  23. Cashback service Paidwork

    Paidwork

    Medium

    Cashback service Paidwork can send its stored Paidwork user ID to a page-controlled URL after a click.

  24. Cashbe

    Cashbe LLC

    Clean

    The extension sends a persistent extension ID, page origins, search terms, and SERP events to Google Analytics.

  25. ExtraPe - Affiliate Link Converter

    ExtraPe

    Medium

    ExtraPe - Affiliate Link Converter sends account passwords in authentication URL query strings to www.extrape.com.

  26. Give Freely: You Save, We Give, Charities Win

    chrome-store-publishers

    Clean

    Give Freely watches every site you visit and forwards merchant order-confirmation details to its affiliate partner wild.link.

  27. Good Deal Or Not - GDON

    Directo Tech, Inc

    Low

    Good Deal Or Not sends travel page URLs, booking details, prices, active-tab URLs, and page content to its backends.

  28. HP Featured Offers

    HP Inc.

    Low
  29. Is It On Game Pass

    elirev4

    Clean

    Is It On Game Pass sends visible Steam game names and app IDs to api.isitongamepass.games for availability checks.

  30. Mojo - Automatic Coupons at Checkout

    developer

    Medium

    Mojo runs JavaScript function strings fetched from its own server inside every website you visit.

  31. MyEasy86

    World Syntech

    Low

    MyEasy86 sends clicked parcel submissions and product-page URLs from shopping sites to myeasy86.com.

  32. Search by image on Aliexpress

    Productsearch

    Medium

    Search by image on Aliexpress sends visited URLs to apiheaven.io and can redirect tabs through apiheaven.io/pulse.

  33. Yakkyofy

    yakkyofy

    Clean

    Yakkyofy sends selected product-page details and image URLs to api.yakkyofy.com for product matching.

  34. Jeftinko

    ceneje.si

    Clean

    1-2-3 Kupovina s Jeftinije.hr posts search queries, page URLs, and visible result metadata to jeftinije.hr.

  35. Active Junky: Cash Back Browser Extension

    Activejunky

    Clean

    Active Junky records visited URLs locally for cashback matching.

  36. Ali Quick - AliExpress Dropship Tool

    Presci Lia

    Low

    Ali Quick sends AliExpress product page visits to imgvidcfig.com and can redirect the tab through a server URL.

  37. Baba Image Downloader

    todd

    Medium

    Baba Image Downloader redirects AliExpress and Alibaba product pages through rzekl.com affiliate links.

  38. Datapinter

    DataPinter

    Clean

    Datapinter posts Shopee and Tokopedia analysis history to its API when users open marketplace analysis views.

  39. E-commerce Side-to-side AI

    Software Engineering Solutions

    Medium

    E-commerce Side-to-side to AI sends user-added product details and comparison links to its backend.

  40. KidStart Savings Prompt

    KidStart

    Clean

    KidStart Savings Prompt sends entered KidStart login credentials in a GetUserID request URL.

  41. ozon-stats-%D1%80%D0%B0%D1%81%D1%85%D0%BE%D0%B4%D1%8B-%D0%B8-%D1%82%D1%80%D0%B0%D1%82

    Arthur

    Low

    Ozon Stats imports its popup font stylesheet from Google Fonts when the popup opens.

  42. Score App - Compare prices as you shop.

    Score App

    Clean

    Score App sends product-page details and image URLs from shopping pages to getscore.app for price comparison.

  43. Bot for Depop

    selleraider.com

    Medium

    SellerAider Toolkit sends Depop page URLs, page HTML, and usage/error telemetry to Discord and SellerAider endpoints.

  44. Similar Inc | Shopping Comparison Co-Pilot

    Similar

    Medium

    Similar Inc | Shopping Comparison Co-Pilot sends a persistent user ID and non-product page URLs to Similar Inc.

  45. TanglePay IOTA Wallet

    bdgarrettjin

    Medium

    TanglePay IOTA Wallet lets connected websites request its stored API login token.

  46. v%E1%BA%ADn-chuy%E1%BB%83n-vi%E1%BB%87t-trung-168

    1688onlinevn

    Clean

    The extension sends Taobao, Tmall, and 1688 product details and note text to 1688online.vn when you add an item to cart.

  47. zoomselling-%D0%B0%D0%BD%D0%B0%D0%BB%D0%B8%D1%82%D0%B8%D0%BA%D0%B0-%D0%BF%D0%BE

    ZoomSelling

    Medium

    ZoomSelling forwards a seller Uzum access token from ad campaign pages to its backend.

  48. Add to GiftList Button

    giftlist-admin

    Clean

    Add to GiftList Button sends product details from the active page to GiftList when you add an item.

  49. Ali Assist | AliExpress Shopping Assistant

    Infinity

    Medium

    Ali Assist redirects AliExpress product and cart pages through an AliExpress affiliate deep-link endpoint.

  50. AliEHelper

    Platon Devs

    Clean

    AliExpress Helper exports AliExpress order and buyer details from the page into a local CSV file.

  51. Alibaba Image Downloader - Images & Videos

    aiprice1

    Low

    Alibaba Image Downloader exposes a page-message route that lets webpages ask it to open arbitrary URLs in tabs or windows.

  52. Amazon Sort by Review Count & Ratings - Shop Smarter!

    Sort By Reviews for Amazon

    Clean

    Amazon Sort by Review Count & Ratings fetches Amazon result pages to sort products by review count.

  53. Amazon Subscribe & Save one-click cancel

    Long Zheng

    Low

    Amazon Subscribe & Save one-click cancel sends Amazon-page error reports and page details to Raygun when crashes occur.

  54. AmzPricePro

    camwide88

    Low

    Amz Price History Pro copies the stored Keepa login token into localStorage on matched 127.0.0.1 pages.

  55. Caramel - Trusted Honey Alternative

    Devino

    Clean

    Caramel sends Amazon cart product-title keywords to grabcaramel.com when applying coupons.

  56. CÔNG CỤ ĐẶT HÀNG GIANG HUY LOGISTICS

    Giang Huy Logistics

    Low

    CÔNG CỤ ĐẶT HÀNG GIANG HUY LOGISTICS evaluates page scripts on supported shopping sites.

  57. Dutycast

    https://dutycast.com

    Low

    Dutycast sends the current page URL from every site to its config API with a persistent extension UID.

  58. fashiongo-style-match+

    FASHIONGO

    Clean

    FASHIONGO Style Match+ uploads images you choose from any website to Fashiongo for style-match search.

  59. Goin

    Goin

    Low

    Goin sends matched shopping page URLs and referrers to Mixpanel and Braze analytics.

  60. Kicktraq

    Kicktraq

    Clean

    Kicktraq requests chart images from its site for each Kickstarter project page you view.