Is LeetCode Tracker safe?

Question

Accepted Answer

LeetCode Tracker is medium risk. LeetCode Tracker includes a GitHub OAuth client secret in the shipped extension bundle. When you authorize GitHub, the extension posts the client ID, client secret, and OAuth code to GitHub's access-token endpoint, making that credential recoverable from the extension rather than protected server-side.

Is LeetCode Tracker safe?

Findings