Is LeetCode Timer safe?
LeetCode Timer sends LeetCode submission code and timing details to codelytics.app after submission checks.
When a LeetCode submission check completes, the extension reads the editor solution and builds a submission record with problem title, URL, difficulty, language, time spent, acceptance status, and timestamps. It adds stored analytics and session identifiers, then posts that JSON to codelytics.app/api/v1/submissions.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
LeetCode submissions are sent to codelytics.app after checks.
When you submit a LeetCode problem, LeetCode Timer collects your solution source code, the problem URL, title, difficulty, timing details, and submission result.
After the check completes, it posts that record to codelytics.app.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
You submit a LeetCode solution.
The extension packages the solution source code, problem details, timing metadata, submission status, and local identifiers into a submission record.
- Your solution inputfunction twoSum(nums, target) { ... } (illustrative)
Includes code read from the LeetCode editor, which can reveal your approach to the problem.
- Problem page URLhttps://leetcode.com/problems/two-sum/ (illustrative)
Identifies the exact LeetCode problem page tied to the submission.
- Problem titleTwo Sum (illustrative)
Names the submitted problem and helps reconstruct your practice history.
- Local extension datapractice_session_id: d7f3a1b2-... (illustrative)
Adds stored identifiers and version data that can connect multiple submissions from the same browser profile.
Where it sends data
Destinations our analysis observed LeetCode Timer contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- codelytics.app
LeetCode Timer sends data to codelytics.app. No other extension we have analysed sends data here.