Shopkoidex

SHOPKOIDEX

Powered by the Starship engine

Quickly detect and eliminate risks in any software your teams rely on — extensions, packages, apps, and models.

Try
Shop
Appstle Subscriptions
Google & YouTube
Judge.me Product Reviews

Supported Marketplaces

Shopify App StoreShopify App StoreAvailable
Salesforce AppExchangeSalesforce AppExchangeEnterprise
Adobe Commerce MarketplaceAdobe Commerce MarketplaceEnterprise
WooCommerce MarketplaceWooCommerce MarketplaceEnterprise
BigCommerce App MarketplaceBigCommerce App MarketplaceEnterprise
Wix App MarketWix App MarketEnterprise
Flagged in the last 24 hours

Catch of the day

Risky and malicious installs flagged by the Shopkoidex engine in the last 24 hours.

eFulfillment Service

by eFulfillment Service

Critical

Order Fulfillment for Ecommerce

00.0Orders and shipping

ShipRobot

by ShipRobot LLC

Critical

Multi-carrier and Multi-channel Shipping Labels

04.7Orders and shipping

Shiprocket ‑ Shipping in India

by Shiprocket

Critical

eCommerce logistics service with lowest courier rates in India

03.7Orders and shipping

Facebook & Instagram

by Meta Platforms, Inc.

High

Canal officiel Meta. Sync catalogue, Conversions API, ads dynamiques. Vente directe sur FB/IG.

760.0K3.7Sales Channels

Triple Whale: Analytics

by Triple Whale

High

Plateforme analytics e-commerce avec attribution multi-touch. Suite complète pour DTC.

8.7K4.6AnalyticsBFS

TikTok

by TikTok / ByteDance

High

Canal officiel TikTok. Pixel, Conversions API, TikTok Shop, ads catalog. Connect & sell.

510.0K4.2Sales Channels
Latest publications

From the research team.

Featured
Research4 min read

Pixel apps shipping silent third-party trackers — how 14 Shopify apps leak checkout PII

An audit of 142 top-installed Shopify apps with checkout pixels. 14 send customer email or phone to undeclared third-party endpoints before the merchant has a chance to inspect the script.

May 28, 2026
Deep Dive3 min read

Built for Shopify ≠ safe for Shopify: a year of scope drift in the App Store

May 12, 2026
Research3 min read

Your AI concierge is talking to OpenAI: a year-end review of LLM data flows in customer support apps

Apr 30, 2026
Vuln Disclosure3 min read

Fail-open: how a 3-day window in the App Store review pipeline let through a credential-stealer

Mar 22, 2026