Is FC 26 Sniping Bot - EAFC Sniper (Formerly Futsnipe) safe?

Medium risk

FC 26 Sniping Bot lets EA's web app read extension local-storage keys, including a saved login response.

The extension accepts external messages from https://www.ea.com/fifa/ultimate-team/web-app/ and returns the requested chrome.storage.local value without an allowlist. One stored key contains the saved api/login response with an account token, so the EA web app can request that key and receive stored credentials.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

store.futsnipe.comv3.4Chrome Web Store
40Risk
Who publishes it

store.futsnipe.com - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
store.futsnipe.com

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on futsnipe.com

    https://futsnipe.com/*

  • Read and change your data on www.ea.com

    https://www.ea.com/*

  • Read and change your data on eafcsniper.com

    https://eafcsniper.com/*

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed FC 26 Sniping Bot - EAFC Sniper (Formerly Futsnipe) contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.ea.com

    FC 26 Sniping Bot - EAFC Sniper (Formerly Futsnipe) sends data to www.ea.com. One other extension we have analysed sends data here.

Updated 30 September 2026hdbmcofbknpjgoghkbollikfojgkfgmh