Is ProCouponCode Autopilot: Online Coupon Codes safe?

ProCouponCode Autopilot broadcasts every checkout request and response body to any script on the page via postMessage.

When you click "Apply All Codes" on a supported store's checkout page, the extension injects a script that patches XMLHttpRequest and fetch() to broadcast the full body of every request and response made on that page using window.postMessage with a wildcard target, without filtering by URL. Any other script running on the page — an ad or analytics tag, or a compromised third-party script — can listen for these messages and read cart contents, coupon validation responses, and order totals for as long as the page stays open. Separately, the extension opens store affiliate links in a hidden background tab to register a tracking cookie, which is standard coupon-extension behavior.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.