Is mpstars safe?

Low risk

mpstars sends the product page SKU to plugin.mpstars.art and inserts the returned fields into Wildberries and Ozon pages.

On Wildberries and Ozon product pages, the extension posts the page SKU and an API key to its own backend and adds the returned seller, brand, note and message text to the page as HTML without escaping. Because those values can originate from marketplace sellers, markup in them could run in the page.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

mps.sklad1v1.0Chrome Web Store
15Risk
Who publishes it

mps.sklad1 - 3 other listings from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
mps.sklad1

Same store account

3 other listings published from this account, 1k+ users between them. 1 of them carries a finding.

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

mpstats.io
Also called by 2 other listings: MPSTATS, Market Papa

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed mpstars contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • plugin.mpstars.art

    mpstars sends data to plugin.mpstars.art. No other extension we have analysed sends data here.

Updated 15 October 2026nnaognnjhcfehafbdnkanifjcoffnegg