Is Tin: Save While Shopping safe to use?

Tin: Save While Shopping has a security risk score of 58.95/100 (MEDIUM risk). Our security analysis detected 561 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Tin: Save While Shopping?

Based on our automated security analysis, Tin: Save While Shopping presents medium risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Chrome Web Store Verified

Tin: Save While Shopping

by [email protected] · 84 users · 5.0 rating

733a02ea-439b-50d3-a3d3-6d9affe2fca3 | v6.3.3

MEDIUM risk

No change since v6.3.2

Risk verdict

Review before use

Score-based assessment (medium risk, 59/100). No analyst review available.

Analysis record

Analysed: 1 months ago
Version: v6.3.3
Artifact: SHA256 2A2…89A
Source: Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

62 detail rows

YARA Rule Matches

13 rules

Severity	Rule	Hits	Files	Metadata
LOW	`credential env files`	3	js/background.jsjs/welcome.jsjs/content.js	-
LOW	`postinstall persistence mechanism`	6	js/background.jsmedia/fonts/AvertaPE-Bold.otfmedia/fonts/AvertaPE-Regular.otf +3 more	-
LOW	`postinstall crypto operations`	5	js/background.jsjs/welcome.jsjs/content.js +2 more	-
LOW	`postinstall system command`	8	media/animations/reload.gifassets/tin.cssjs/background.js +5 more	-
LOW	`postinstall file manipulation`	5	js/background.jsjs/popup.jsjs/welcome.js +2 more	-
LOW	`postinstall network communication`	11	js/content.js.LICENSE.txtjs/background.jsmedia/animations/best-price.gif +8 more	-
LOW	`postinstall registry modification`	2	js/content.jsjs/background.js	-
LOW	`postinstall obfuscation`	8	assets/tin.cssjs/background.jsjs/popup.js +5 more	-
LOW	`LocalStorageShouldNotBeUsed`	2	js/background.jsjs/content.js	-
LOW	`postinstall file download`	4	js/background.jsjs/popup.jsjs/welcome.js +1 more	-
LOW	`UntrustedContentShouldNotBeIncluded`	2	js/background.jsjs/content.js	-
LOW	`SQLInjection`	2	js/background.jsjs/content.js	-
LOW	`NoUseWeakRandom`	2	js/background.jsjs/content.js	-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

499 total

Loading network indicators

IoC detail rows are loaded outside the initial page render.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

Noisy-finding weight

x1.00

Publisher domain

stayfreeapps.com

Observed

Store verification signal

Limited signal

Limited

Extension portfolio

Portfolio

13 evidence rows available.

Finding Categories

Obfuscation

499

IoC Indicators

YARA Rules Matched

13 rules(60 hits)

credential env files postinstall persistence mechanism postinstall crypto operations postinstall system command postinstall file manipulation postinstall network communication postinstall registry modification postinstall obfuscation LocalStorageShouldNotBeUsed postinstall file download UntrustedContentShouldNotBeIncluded SQLInjection NoUseWeakRandom

Requested Permissions

7 permissions

<all_urls>

Access and modify data on every website you visit

Dangerous

identity

Access your identity and sign-in tokens

High

tabs

Medium

storage

Low

unlimitedStorage

Low

webNavigation

Low

alarms

Low

Security Analysis Summary

Security Analysis Overview

Tin: Save While Shopping is a Chrome Web Store extension published by [email protected]. Version 6.3.3 has been analyzed by the Risky Plugins security platform, receiving a risk score of 58.95/100 (MEDIUM risk) based on 561 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

High: 1 finding(s)
Medium: 500 finding(s)
Low: 60 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Tin: Save While Shopping is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 84 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Chrome version history

Risk trend by version

5 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected

Change since first

+11

Change from previous

No change

Versions:

First analyzed version

6.2.0

Jul 21, 2026

Risk range

48 to 59

Across analyzed versions

Latest analyzed version

6.3.3

Sep 17, 2026

Selected version

medium

Version

v6.3.3

1 months ago

Risk score

Findings

565

Change vs previous

Pick any point on the chart to explore that version's code below.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

About This Extension

💰 Stop overpaying. Tin automatically finds and applies the best coupon codes at checkout - so you always pay less, without lifting a finger. Just shop like you normally do. When you reach checkout, Tin scans thousands of discount codes in seconds and applies the best one automatically. No more tab-switching, no more copy-pasting, no more missed deals. ✨ WHAT TIN DOES FOR YOU 🎟️ Auto-applies the best coupon codes at checkout across 50,000+ retailers 📦 Tracks your packages - from order placed to doorstep delivered 💸 Shows your total savings so you always know how much you've saved 🔒 Sign in securely with your Google account - setup takes seconds 🆓 Completely free 🛍️ HOW IT WORKS 1. Install Tin and sign in with Google 2. Shop on any of your favorite stores 3. At checkout, Tin automatically tests and applies the best available coupon 4. Watch the price drop - and keep the difference 📦 PACKAGE TRACKING, BUILT IN Once you've ordered, Tin keeps an eye on your shipments. See carrier info, tracking numbers, delivery status, and estimated arrival dates - all from the Tin popup. No more logging into 5 different carrier websites. 💡 YOUR SAVINGS DASHBOARD Open the Tin popup anytime to see how much you've saved across all your orders. Your personal savings history, right in your browser. 🤝 AFFILIATE DISCLOSURE Tin works with affiliate networks. When you shop through Tin, some stores may pay us a commission - at no extra cost to you. The best part? It's 100% free. Install Tin today and never pay full price again.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Web Guardian: Phishing & Malware Protection

[email protected]

MEDIUM 730 users

StayFocusd – Website Blocker & Focus Timer & Shorts Blocker

[email protected]

MINIMAL 700K users

StayFree - Website Blocker, Web Usage Stats, Shorts Blocker

[email protected]

MINIMAL 200K users

Luna Adblock for Youtube & Websites

[email protected]

MINIMAL 100K users

AIWise — Claude & Gemini Usage, Quota Tracker & Bookmarks

[email protected]

MINIMAL

StayFree - Web Analytics & Time Tracker

ST Pulse

MINIMAL 6K users

Tin: Save While Shopping

Analysis record

Evidence ledger

OBFUSCATION-UNICODE_HEAVY-js/welcome.js-2

MANIFEST-SENSITIVE-PERM-TABS

YARA Rule Matches

Network Indicators

Publisher Evidence

Finding Categories

YARA Rules Matched

Requested Permissions

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

Risk trend by version

About This Extension

Frequently Asked Questions

Similar Extensions

Web Guardian: Phishing & Malware Protection

StayFocusd – Website Blocker & Focus Timer & Shorts Blocker

StayFree - Website Blocker, Web Usage Stats, Shorts Blocker

Luna Adblock for Youtube & Websites

AIWise — Claude & Gemini Usage, Quota Tracker & Bookmarks

StayFree - Web Analytics & Time Tracker