Is Discord Batch Deleter safe?

Medium risk

Discord Batch Deleter sends Discord channel URLs to slackext.com when a user starts batch message deletion.

When a user starts deleting all messages or messages from selected users, the popup sends a delete-start event to slackext.com. That event includes the active Discord channel URL, extension version, deletion type, and the number of messages selected for deletion.

hhhustv0.2.1Chrome Web Store
45Risk
Who publishes it

hhhust - 2 other listings from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
hhhust
Website
slackext.com/discord-deleter

Same store account

2 other listings published from this account, 4k+ users between them. 1 of them carries a finding.

Slack Deleter3k+CleanSlack Printer1k+Medium

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Discord delete-start telemetry sends channel URL to slackext.com

Starting a deletion from the popup makes Discord Batch Deleter send delete-start telemetry to slackext.com, including the active Discord channel URL, tab context, delete mode, and selected message count.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user starts a delete-all or delete-by-users action from the popup.

The extension did this

The extension sends delete-start telemetry that includes the active Discord channel URL to slackext.com.

Captured request
POSThttps://slackext.com/api/log
Fields in the request
  • Discord channel URL
    (illustrative) https://discord.com/channels/123456789012345678/987654321098765432

    Identifies the Discord server and channel context open when deletion starts.

  • Active tab context
    (illustrative) active Discord channel tab

    Shows that the telemetry is tied to the currently active Discord tab.

What it can do

Permissions this extension asks for, as declared in version 0.2.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on slackext.com

    https://slackext.com/

  • Store data in your browser

    storage

  • Act on the current tab, but only after you click the extension

    activeTab

Where it sends data

Destinations our analysis observed Discord Batch Deleter contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • slackext.com

    Discord Batch Deleter sends data to slackext.com. One other extension we have analysed sends data here.

Updated 30 September 2026lgmnomldfahgdpkbmlegninjpokgmoob