Is Sellha safe?

Question

Is Sellha safe?

Accepted Answer

Sellha is high risk. Code analysis shows the Sellha extension carries a list of about 31 pre-set Naver cookie strings hardcoded directly in its background.js bundle. Twenty of these strings contain complete Naver login-session tokens (NID_AUT and NID_SES) alongside the NNB and NID_JKL identifiers Naver uses to recognize a signed-in account. When the extension fetches data from Naver Shopping search endpoints, background.js picks one of these stored cookie strings at random and attaches it as the Cookie header on the outgoing request using a declarativeNetRequest rule, so the request is sent as if it came from one of those Naver accounts. The token name timestamps correspond to early 2024, indicating they were captured from real Naver sessions at that time. This is a static property of the shipped code; we did not run the extension to confirm a token was accepted by Naver in our test session, but the code path that selects a token and sets it as the Cookie header is present and reachable.

Is Sellha safe?

Findings