Is 月亮树MoonTree极速调价插件 safe?

Low risk

月亮树MoonTree极速调价插件 stores saved MoonStatistics credentials and user tokens with a hardcoded in-bundle password.

The popup saves the selected login profile, including type, name, and password, and stores the returned user object in chrome.storage.sync. The Amazon Seller Central content script reads that saved user object using the same fixed SecureStorage password, so those stored values can be decrypted with the shipped extension code.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

月亮树跨境v2.9.5Chrome Web Store
15Risk
Who publishes it

长沙月亮树信息科技有限公司 - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
月亮树跨境
Declared legal entity
长沙月亮树信息科技有限公司
Registered address
芙蓉路380号汇金国际银座1504, 长沙市, 湖南省 410000, CN
Registered contact
长沙月亮树信息科技有限公司

Same operator - 2 listings

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

sellercentral.amazon.ie
Also called by 5 other listings, including SellerToolKit, HGR Non API

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026onnmeegbacgmcgfeombhodjiipkdeenc