Is NetSuite Scripted Records safe?
NetSuite Scripted Records injects a page UI that loads a Buy Me a Coffee image from cdn.buymeacoffee.com.
When you click the extension, it injects scripts into the active tab and appends a floating NetSuite Scripted Records UI. That UI embeds an image from cdn.buymeacoffee.com, causing the page to request the asset and send standard request metadata such as IP address and referrer to that host.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on netsuite.com
https://*.netsuite.com/*
Act on the current tab, but only after you click the extension
activeTab
Run its own code inside the pages you visit
scripting
Where it sends data
Destinations our analysis observed NetSuite Scripted Records contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- cdn.buymeacoffee.com
NetSuite Scripted Records sends data to cdn.buymeacoffee.com. 5 other extensions we have analysed send data here.