Is TripChipper safe?

Question

Accepted Answer

TripChipper is high risk. When you search for places to stay on Airbnb, the TravelArrow extension reads each listing's property ID, nightly price, check-in and check-out dates, and guest counts from the page and POSTs them to a third-party API (Whimstay) using a hardcoded 25-year bearer token embedded in the extension bundle. Our dynamic analysis confirmed the token authenticates successfully against the live Whimstay endpoint. When Whimstay returns a lower price, the extension injects a deal pill into the Airbnb results, with the outbound link wrapped in a Commission Junction affiliate URL that credits TravelArrow for the referral.

Is TripChipper (TravelArrow) - Travel Better safe?

Findings