Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeUnilever Coupa Assistant
Findings · 3
+1 more finding locked
MEDIUM FINDINGS · 3
  1. 01Azure Application Insights telemetry sends page views, user interactions, PR IDs, commodity codes, and billing section usage metrics to Microsoft Azure
  2. 02NPS survey submission sends user email, user ID, PO number, supplier name, company code, commodity code, and full Qualtrics survey payload to Azure backend
  3. 03Hardcoded Qualtrics API bearer token embedded in extension source code grants write access to Qualtrics survey SV_6gNrYYv3pU4qXt4
+1 more finding locked
OTHER EXTENSIONS

Is Unilever Coupa Assistant safe?

Low risk

No summary available.

Codemonkv0.17.3Chrome Web Store
20Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

+1 more finding not shown

Book a call to see all findingsScan your browser
Updated 30 May 2026kpbfmcanamlfcbfnojlkbcjfjjhcjbon

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact