Is thunt-temu%E6%B0%B8%E4%B9%85%E5%85%8D%E8%B4%B9%E5%95%86%E5%93%81%E6%95%B0%E6%8D%AE%E5%88%86%E6%9E%90-%E4%B8%8B%E8%BD%BD%E5%B7%A5%E5%85%B7 safe?

Question

Accepted Answer

thunt-temu%E6%B0%B8%E4%B9%85%E5%85%8D%E8%B4%B9%E5%95%86%E5%93%81%E6%95%B0%E6%8D%AE%E5%88%86%E6%9E%90-%E4%B8%8B%E8%BD%BD%E5%B7%A5%E5%85%B7 is high risk. We observed that on temu.com the extension's content script reads the page's product data (Temu populates a `window.rawData` object and product `goodsList` arrays) and sends it to temuhunt.com without any action from you. When you open temu.com we captured an automatic POST to https://temuhunt.com/api/plugin/new_goods_list_save_v2 from the extension's background service worker; the body is a gzip-compressed, base64-encoded JSON object of the product listings you were viewing — including product IDs, titles, prices, listing URLs, and sales counts — wrapped with an `anti_content` token. The extension also sends product detail (`new_product_save_v2`) and store detail (`new_store_save_v2`) the same way, and a MutationObserver re-sends as the listing grid changes while you scroll. Before sending, the extension reads `window.rawData.store.localInfo.language` and `region` and adds them to each product's pricing/recommendation record. When you use THunt's cache-clear action, the extension requests cookie access for Temu and reads cookies for the .temu.com domain. The reviewed behavior preserves a few named cookies and removes others; the database evidence says cookie values were not transmitted externally.

Is THunt - Temu™永久免费商品数据分析 & 下载工具 safe?

Findings