Caution required
Suspicious in code review
Our reviewer found behaviour consistent with malware, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
1 high-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Fair Price Tracker is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by data exfiltration. It comes from a publisher with 2 extensions and was last updated in December 2022.
Key findings
- High
Data Exfiltration
User-supplied email or phone number and the current Wayfair page URL are serialised into a plain-text Slack message and sent to a hardcoded Slack incoming-webhook token. The receiving Slack workspace is controlled by an unknown party — not the publisher's own domain ([domain withheld]). Any recipient of that Slack channel receives the user's PII () and browsing context without the user being informed of this specific destination.
Analyst notes
The extension collects user-entered and a Wayfair product URL and POSTs them to a hardcoded Slack webhook URL ([domain withheld]) belonging to an unknown third-party Slack workspace — not the publisher's own infrastructure. The CWS-disclosed collections include 'Personally identifiable information' and 'Location', and Slack is a well-known SaaS, so the destination isn't itself disqualifying; however, the data (user's + browsing URL) flows to whoever controls that Slack webhook token, which is opaque and unverifiable. The publisher's only other extension is flagged malicious (), the permhash cluster has 43% malware rate, and the product appears semi-functional (1292-day-old v0.1 with 2-star rating), raising the possibility this is a simple data-harvesting tool dressed as a price tracker rather than a genuine product.
Fair Price Tracker Chrome extension security report
ID: hdnbiifonipgfpbcnpecjmeeciokhjjm
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- mikemcelligott
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
- 1 high
The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.
1 high-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
We watch WayFair prices so you don't have to!
Read the publisher’s full description
Install this basic extension and watch for your target prices on any product on the Wayfair store!
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
1 high-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from mikemcelligott
- I Like The Stock0 users
Popular in Shopping
- PayPal Honey: Automated Coupons & Rewards13,000,000 users
- Avira Safe Shopping7,000,000 users
- 中国工商银行密码扩展5,849,774 users
- Capital One Shopping: Save Now5,422,697 users
- Keepa - Amazon Price Tracker5,000,000 users