Pie Shopping: AI Cash Back and Coupons

AI Security Review

Evidence context: threat category none; evidence quality weak.

The Pie Shopping extension presents an unusual security profile: with 300,000 users and version 1.33.6, the analysis returned zero findings across every category including malware signatures, network indicators, obfuscation, and code-smell detections. This complete absence of findings is atypical for a shopping extension that would normally contain JavaScript code triggering at least some code-smell rules.

The extension's description claims to provide cash back, auto-apply coupons, and AI-powered deal suggestions. The developer email '[email protected]' appears legitimate for a shopping service, and the extension name 'Pie Shopping: AI Cash Back and Coupons' does not appear to impersonate any known brand or extension. There is no evidence of typosquatting, browser hijacking, credential theft, or other malicious behavior in the available data.

However, the critical issue is that findings_by_category is completely empty and findings_summary shows 0 across all severity levels and threat indicator categories. According to CVEQ's known patterns, YARA code-smell rules fire on almost any non-trivial JavaScript. The complete absence of code-smell findings (0 in code-smell category) suggests either the extension contains no JavaScript (unlikely for a shopping extension) or the analysis did not properly scan the extension's code files.

The strongest counterargument to this verdict is that the extension could genuinely be clean with no security issues. Extensions from legitimate publishers can have minimal or no security findings. However, zero findings across all categories—including network, obfuscation, and code-smell—is statistically improbable for a 300,000-user extension with multiple features. This pattern more strongly indicates incomplete analysis data rather than a perfectly clean codebase.

Without actual file paths, finding details, or evidence that code was scanned, no reliable security assessment can be made. The extension warrants reanalysis to confirm whether the scanning process executed properly and to obtain meaningful security findings.

Key Reasons

• Zero findings across all security categories including code-smell
• findings_by_category is empty object
• No file paths or specific findings available for analysis
• 300,000 users with no detectable code activity is atypical

Reviewed 2026-05-23; recommended action: reanalyze; model confidence 75%.