Chrome Web Store
5Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

9 indicators in this extension

9 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

MurmSpy — Shopify Store Spy is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in October 2026.

MurmSpy — Shopify Store Spy

MurmSpy — Shopify Store Spy Chrome extension security report

ID: icnlmjbjbhlbmdedmfleiheaokblkiha

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
0.6.3
Size
0.16 MB
Rating
5.0/5
Reviews
2
Users
4
Type
Extension
Updated
Oct 12, 2026
Category
Developer tools
Price
Paid
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
2extensions
All still listed

Publisher Contextual Analysis

Trusted
Author
murmtools.com
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
2
Active
2
Obsolete
0
Listed
2
Unlisted
0
Users
11

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6
Screenshot 7
Screenshot 8
Screenshot 9
Screenshot 10

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 10% increase: Early script execution enables pre-emptive content manipulation
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
https://*.myshopify.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.tiktok.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://shop.tiktok.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://extensionpay.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://*.myshopify.com/*
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

9 indicators in this extension

9 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Store research on the storefront you're looking at: best sellers, pricing, app and theme detection, changes since your last visit.

Read the publisher’s full description

The honest alternative to Koala Inspector and PPSPY — professional store analytics with competitor monitoring built in, and every estimate clearly labeled. Track any Shopify store or TikTok Shop listing. Professional store analytics for the storefront you're looking at. Open any Shopify store and a clean, light panel reads the public data your browser already loaded: what's selling, how it's priced, which apps run the stack, and what changed since your last visit. Open a TikTok Shop listing and the public sold counter becomes an honest revenue estimate at a glance. Every number is transparent about where it comes from. Facts are read straight from the page. Estimates are marked with ~ and a small ⓘ explains the method in one sentence. Nothing is fabricated. ON ANY SHOPIFY STORE ✓ Best sellers, ranked by Shopify's own best-selling sort — the canonical "what's actually selling" signal, with a clearly labeled demand index ✓ Watchlist — save a store and every visit shows what changed: new products, price moves (old → new), apps added or removed, theme swaps. Stored locally. No account required. ✓ Pricing analytics — % of catalog on discount, average and median markdown depth, a price distribution chart with the median marked, and the biggest markdowns ✓ Catalog map — every product plotted as a dot placed by its price, with discounted items ringed: the store's whole price architecture at a glance ✓ Launch cadence — products added per month, 24 months back, on a proper chart: crosshair, exact values and share-of-total on hover, arrow keys included ✓ Traffic signal — Google's Chrome UX Report says whether the store clears the real Chrome-traffic threshold (a strong small-store tell on its own), plus a one-click full traffic report ✓ Ad footprint — the store's Facebook/Instagram/TikTok identities parsed from the page, with pre-filtered links into the Meta and TikTok ad libraries ✓ App detector — 70+ maintained fingerprints (Klaviyo, Judge.me, Loox, Recharge, Rebuy, Gorgias…), each with the evidence found ✓ Theme + pixel detection (Meta, TikTok, Google, Pinterest, Snap) ✓ Store DNA export — a designed report card (1200×1500 PNG) rendered entirely in your browser: stats, top sellers, app stack, launch trend. Built to be shared in a team channel or a deck. ✓ Two CSV flavors — analysis (prices, discounts, dates) and a Shopify product-import file that loads straight into Products → Import ✓ Compare 2–3 saved stores side by side; sourcing links (AliExpress / Google Lens) on every product row — no affiliate codes, ever ✓ Confidence you can trust — when a store blocks its catalog or the data runs thin, the panel says so instead of inventing a number, and a "checked … ago · refresh" control keeps every read datestamped ✓ ⌘K command palette and "/" filter — built for speed ON TIKTOK SHOP ✓ Public sold counts, surfaced instantly ✓ Revenue estimate = sold × price, always marked ~ with the method ✓ Saturation read — early / rising / peak / saturated, from sold velocity vs listing age: is the wave still catchable? ✓ Seller credibility grade A–E from public signals ✓ Shop roll-up: totals and top products across a seller's catalog + CSV WHY MURMSPY • Honest numbers. Estimates are labeled and explained. The blur on Pro features hides your real data computed on your machine — not placeholder noise. • Fast and quiet. A slim bar that expands when you ask. No spam, no injected junk, no affiliate links. • Private by design. Reads only public store data. Watchlist and settings live in local storage. No account, no server, nothing phones home. • Updated weekly. Detectors are maintained continuously — when platforms change, MurmSpy heals in days, not months. FREE VS PRO Free (forever): store overview, app/theme/pixel detection, top-10 best sellers with demand, 25 products, watchlist for 3 stores with change tracking, pricing top-line, 6-month cadence, ad-library links, 1 CSV + 1 DNA export per day. Pro (€8.99/mo or €69/yr): full catalogs and rankings, price distribution + markdowns, 24-month cadence, cross-store compare, unlimited CSV/DNA exports (no watermark), 50 saved stores, the full TikTok Shop module. WORKS ON Any *.myshopify.com storefront automatically. Custom-domain Shopify stores: click the MurmSpy icon → "Check this store" (that's the only page access we ask for — never every website). TikTok Shop product and shop pages. MurmSpy reads the same public pages your browser already loads: no logins, no automation, no private APIs. Not affiliated with Shopify or TikTok.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
9

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

9 indicators in this extension

9 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
0.6.3
Latest
0.16 MBNot scanned—
d7c38b056f1ceba4a05751695e3e6ddf01f8a4689d5659ae1e7cd8abbfdd0c8c
0.6.2
0.15 MBNot scanned—
d7c38b056f1ceba4a05751695e3e6ddf01f8a4689d5659ae1e7cd8abbfdd0c8c
0.6.1
0.15 MBNot scanned—
d7c38b056f1ceba4a05751695e3e6ddf01f8a4689d5659ae1e7cd8abbfdd0c8c
0.5.4
0.16 MBNot scanned—
d7c38b056f1ceba4a05751695e3e6ddf01f8a4689d5659ae1e7cd8abbfdd0c8c
0.5.0
0.24 MBNot scanned—
d7c38b056f1ceba4a05751695e3e6ddf01f8a4689d5659ae1e7cd8abbfdd0c8c
Showing 1 to 5 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.