Is International Hustlers safe?
International Hustlers accepts Retool auth callback tokens and stores the email they contain locally.
When a Retool authentication tab finishes loading with auth=success, the extension reads a base64 token from the URL and saves its email value as the local user email. The token is checked for a non-empty email and a recent timestamp, but the code does not verify a signature or confirm the token with a server before updating storage.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itGROWTH MAKO LTD - 5 other listings from the same operator, 1 of them carrying a finding
GROWTH MAKO LTD - 5 other listings from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same operator - 5 listings
Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.