Is SellerApp Amazon Index Checker safe?

Question

Accepted Answer

SellerApp Amazon Index Checker is critical risk. Code analysis shows that when the service worker starts, Amazon Index Checker opens a persistent WebSocket to SellerApp's scraper-net endpoint. That socket can receive page URLs and parser instructions, fetch the supplied pages with browser credentials included, and return parsed page data with optional raw HTML; dynamic analysis also observed a generated socket identifier in local extension storage, but service-worker WebSocket frames were not captured by the test tooling. When installed, the extension automatically searches for 'samsung' across every Amazon marketplace worldwide to detect whether you are logged in to Amazon. After each probe, the extension issues a DELETE request to Amazon's recent-search API to remove 'samsung' from your search history. Dynamic analysis captured 7 of these DELETE requests firing within 30 seconds of install, before any user interaction, with 6 of 7 returning HTTP 200 (successful deletion). The deletions modify your Amazon account state without any notice in the extension UI.

Is Amazon Index Checker safe?

Findings