| | Hello there. Before anything else this Sunday, a two-minute security check: a store owner found an app extension sending shoppers to a fake checkout. After that, the week ends with a firm Nov 2 cutoff for one catalog API, a debate about BFCM discounts that eat all the profit, and an honest thread about money merchants wish they had kept. In today’s newsletter, we’ll get into: - A merchant reports a HulkApps extension sent shoppers on a large store to a fake checkout; test your own checkout in a private window if you run HulkApps.
- Shopify's Global Catalog REST API stops serving traffic on Nov 2, so apps still calling it must move to Global Catalog MCP before then.
- Merchants trade notes on protecting BFCM margins, whether won chargebacks still count against you, and the apps and themes that were a waste of money.
| |
|
| | 🔌 The Global Catalog REST API switches off on Nov 2. Shopify says the Global Catalog REST API stops serving traffic on November 2. It was deprecated in April, and after the cutoff every request to the old endpoints fails, saved catalogs included. Apps must move to Global Catalog MCP, which offers search, batch lookup of up to 50 items and full product details. Authentication stays the same, so check with any app vendor that relies on it. | |
|
| | 🛒 How do you run a BFCM sale that still makes money? A merchant who went all in on discounts last year says that after costs and surprise returns, there was barely any profit left, and asks what works instead. One reply says to offer the deepest discount you can afford, even at break even, to win future orders. Another cut their sale from 30% to 25% off and saw no drop in purchases. | |
|
| | 💳 Do chargebacks you win still count against you? A store at 440 orders with three chargebacks worries that a few more could get it flagged, even with strong evidence on each. Replies push back on the idea that every dispute stays on your record: one merchant says their Shopify chargeback rate shows 0% after winning two recently, and another says getting the customer to close the dispute quickly also helped. 💸 What did you spend money on that was useless? A thread asking merchants for their biggest Shopify money regrets is filling up with lessons. One paid for a premium theme that ran slower than the free one. Another spent $1,800 on a custom agency theme, then went back to Dawn within a year because updates kept breaking apps. Bundle apps that clashed with other promotions also came up. | |
|
| | 🚨 A HulkApps extension sent shoppers to a fake checkout. A store owner reports that a HulkApps extension was loading malicious code on a large Shopify store, sending customers to a fake checkout page. The cause is unclear. If you use HulkApps, add an item to your cart in a private window, press Checkout and confirm the URL is your real checkout, then change your HulkApps password. The hijack stopped once Shopify escalated it. 🧮 App-owned metaobject lists stop at 50 in themes. A developer tested pagination on a list of metaobject references from a theme app extension. On a list owned by the app, Liquid loops only ever return the first 50 entries, whatever page you request, while the same list in the custom namespace pages normally. If your swatch or variant app shows more than 50 options, this is likely why some go missing. 📦 A Stocky alternative is looking for POS testers. The makers of Restock Ops, a purchasing and receiving app for small Shopify POS shops, are inviting up to 10 retailers who left Stocky to run one real delivery and one stock count through it. It covers partial receiving, unit cost updates on receipt, barcode labels and scanner stocktakes. Testers get three months free and direct support, with no review requested. | |
|
| | Three remote roles posted in the last two weeks, each linked to its own posting with the source named. Each posting is linked from the source named on its line, with the date it was posted. Check the details on the posting itself. | |
|
|
|
