SpurIT Wholesale Pricing

Installing this app added a popup to our checkout that advertised random other products not associated with our business, website, or industry. The one that caught our attention was Sea Moss Gel, but we also saw advertisements for Capital One credit cards. Uninstalled, and no more popups. We first noticed it by adding something to your cart, then removing it without completing checkout. If they can insert code to perform this seemingly harmful activity, what other code could they include?