Sources:
https://www.youtube.com/watch?v=qCGT_CKGgFE
https://developer.chrome.com/docs/webstore/program-policies/mv3-requirements
https://www.benedelman.org/honey-detecting-testers/

All Investigations were live:
https://twitch.tv/ThePrimeagen - I Stream on Twitch

Primeagen's resource offers insights, tutorials, and resources for software developers and technology enthusiasts. Readers can learn about productivity hacks, career development strategies, and personal growth. With articles, videos, and practical advice, Primeagen provides  guidance and expertise for achieving professional success and fulfillment.

ThePrimeTime

A developer reverse-engineered Honey's Chrome extension source code to investigate allegations of fraudulent behavior. The analysis reveals that Honey's "stand down" system (which should prevent commission theft from affiliate links) selectively applies rules based on user points. The code evolved from hardcoded logic in 2019 to a sophisticated, JSON-driven configuration system in 2024, indicating intentional engineering effort to make the behavior more robust. Additionally, the extension contains a JavaScript-in-JavaScript virtual machine (using Acorn parser) that can execute remote code in an obfuscated manner, potentially to evade ad blockers and other extensions.

I Read Honey's Source Code