Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: 2048 Game Timeless

CRITICAL RISKRemoved from Chrome Web Store

2048 Game Timeless

ID: kopgfdlilooenmccnkaiagfndkhhncdn

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.0.9

Size

0.25 MB

Rating

4.0/5

Reviews

Users

30,000

Type

Extension

Updated

Apr 15, 2025

Publisher Contextual Analysis

Trusted

Author: Cameron FordView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

30,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

2048 Game Timeless: The Puzzle Game That Never Gets Old, Now Available for Offline Play!

Welcome to 2048 Timeless, the browser extension that brings the classic puzzle game to your fingertips like never before! With 2048 Timeless, you can access the addictive game right from your browser toolbar, making it easy and convenient to play at any time. And the best part? You can play offline, no internet connection required! But 2048 Timeless isn't just any old game. It's a strategic, numbers-based puzzle that challenges your problem-solving skills and keeps your mind sharp. With simple rules and endless possibilities, this game is perfect for anyone looking to relax and have fun while exercising their brain. To play, simply swipe tiles to combine numbers and reach the elusive 2048 tile. But beware, the board can quickly fill up, so make every move count! Don't miss out on the endless hours of entertainment and brain stimulation that 2048 Timeless provides. Download the browser extension today and experience the timeless puzzle game for yourself!

User Growth

Showing data from May 28, 2023 to May 26, 2024

Versions

-99.5%(-5,970,000 users)

Compared to 4 months ago

3 versions released in this period

Rating Count

Total: 57 ratings

Average Rating

Current: 4.02 / 5.0+4.02

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium3

Low0

Versions scanned

Showing 1 of 7 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.7 Code review	5

Extension Version	Code Review Findings
1.0.7	5

Files with findings

3 distinct paths — top paths by unique finding count:

js/background.js3
js/content.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	high	js/background.js (line 48)	On install, the background service worker enumerates every open tab in every window and uses chrome.scripting.executeScript to inject 'js/contentScript.js' into each. This is a one-shot privilege-escalation pattern th…	1.0.7
2	Privilege Escalation	high	manifest.json (line 20)	A 2048 game whose UI is a popup.html new-tab override declares <all_urls> host permissions, a <all_urls> content script at document_start, and the scripting permission. None of these are necessary for a self-contained…	1.0.7
3	Code Injection	medium	js/content.js (line 30)	Content script registered against <all_urls> at document_start uses insertAdjacentHTML to inject a fixed-position floating element into every web page the user visits (banks, webmail, intranet, etc.) when a 'quickAcce…	1.0.7
4	Tracking	medium	js/background.js (line 216)	Sets up a recurring 60-minute alarm that fires a 'run' event to Google Analytics Measurement Protocol (https://www.google-analytics.com/mp/collect) for the lifetime of the extension. This generates persistent telemetr…	1.0.7
5	Unauthorized Data Collection	medium	js/background.js (line 159)	Creates a persistent UUIDv4 client ID stored in chrome.storage.local and a session ID, then exfiltrates them to Google Analytics via the server-side Measurement Protocol with a hardcoded api_secret. Because the api_se…	1.0.7

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/winstonjs/winston/tree/master/UPGRADE-3.0.md	https://github.com/winstonjs/winston/tree/master/UPGRADE-3.0.md
github.com	/winstonjs/winston.git	https://github.com/winstonjs/winston.git
meetununsstats.com	-	https://meetununsstats.com/
example.com	-	https://example.com
www.google-analytics.com	/mp/collect	https://www.google-analytics.com/mp/collect
www.google-analytics.com	/debug/mp/collect	https://www.google-analytics.com/debug/mp/collect
github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Hello, I hope you're having a splendid day! I am currently seeking opportunities to expand my business operations by investing in extensions with a significant user base, beginning from 50,000 users and up. No matter if your extension has a modest user base or counts its users in the millions, I am interested and ready to negotiate a purchase. If you are in possession of such an extension and looking to turn it into a profit, please consider reaching out to me. We can discuss the price and proceed with a transparent and secure transaction through a trusted escrow service based in the United States. It's great that Google allows the transfer of extension ownership between accounts, so your Google account ownership will remain intact. If you have any needs, please contact us via the following contacts Whatsapp: +1 (248) 896‑8035 Telegram: t.me/harryysandersonn

Kenya Otterholt·3 Jun 2024

This is the best game and amazing game

Rana Waqas·19 Feb 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

2048 Game Timeless

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 7 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating