The extension is a Korean Coupang (e-commerce) inventory checker. injects a script into the active tab solely to read inline page data (exports.sdp) from Coupang's own page scripts and display the stock quantity in the popup textarea — no data is exfiltrated. is the well-known open-source library (v4.2, CC-BY2, [domain withheld]) included verbatim. There is no network request to any external server, no tracking, no obfuscation, and no credential access. The bundled manifest is MV2 with only activeTab, while the published manifest shows MV3 with host_permissions — this is a version mismatch (the CWS listing was updated to MV3 but the ZIP was not), which slightly elevates the ML score but is not malicious behaviour. The permhash cluster malware rate (29%) reflects that activeTab-only is a very common permission set shared across many unrelated extensions, not a cluster of peers with the same code.