Shopkoidex

SHOPKOIDEX

Powered by the Starship engine

Quickly detect and eliminate risks in any software your teams rely on — extensions, packages, apps, and models.

Supported Marketplaces

Shopify App StoreShopify App StoreAvailable
Salesforce AppExchangeSalesforce AppExchangeEnterprise
Adobe Commerce MarketplaceAdobe Commerce MarketplaceEnterprise
WooCommerce MarketplaceWooCommerce MarketplaceEnterprise
BigCommerce App MarketplaceBigCommerce App MarketplaceEnterprise
Wix App MarketWix App MarketEnterprise
Flagged in the last 24 hours

Catch of the day

Risky and malicious installs flagged by the Shopkoidex engine in the last 24 hours.

Latest publications

From the research team.

Featured
Research4 min read

Pixel apps shipping silent third-party trackers — how 14 Shopify apps leak checkout PII

An audit of 142 top-installed Shopify apps with checkout pixels. 14 send customer email or phone to undeclared third-party endpoints before the merchant has a chance to inspect the script.

May 28, 2026
Deep Dive3 min read

Built for Shopify ≠ safe for Shopify: a year of scope drift in the App Store

May 12, 2026
Research3 min read

Your AI concierge is talking to OpenAI: a year-end review of LLM data flows in customer support apps

Apr 30, 2026
Vuln Disclosure3 min read

Fail-open: how a 3-day window in the App Store review pipeline let through a credential-stealer

Mar 22, 2026