Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Adblocker for Twitch™

CRITICAL RISKRemoved from Chrome Web Store

Adblocker for Twitch™

ID: mmnpcobofmnpghjnjkfhkfbdndajgfph

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.0.5

Size

1.18 MB

Rating

3.4/5

Reviews

Users

10,000

Type

Extension

Updated

Aug 8, 2022

Publisher Contextual Analysis

Author: faithe.wollastonView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

13,083

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

The Twitch Adblock extension helps you block Twitch ads.

Adblocker blocks ads by automatically reducing the video resolution to ensure that you are not disturbed by ads while watching live streams or VOD on twitch.tv. Feature: ✔️Easy to use Turn on the extension work switch to start blocking ads immediately. ✔️No bother No effect on watching Twitch streams. You can turn off the ad blocking prompt to improve the viewing experience. ✔️Show blocking times Show the number of ad blocks in the extension popup. Even if the ad block prompt is turned off, you could know the extension is working. You can clear it at any time. ✔️Free 100% free. Notice: No personal or Twitch account information is collected/shared.

User Growth

Showing data from Apr 29, 2022 to Sep 01, 2022

Versions

+5782.35%(+9,830 users)

Compared to 4 months ago

3 versions released in this period

Rating Count

Total: 36 ratings+5 (16%)

Average Rating

Current: 3.42 / 5.0+3.42

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium5

Low1

Versions scanned

Showing 1 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0 Code review	9

Extension Version	Code Review Findings
1.0.0	9

Files with findings

5 distinct paths — top paths by unique finding count:

js/background.js3
js/inject-script.js3
js/ga.js1
js/popup.ec50b24d.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	high	js/inject-script.js (line 706)	`window.fetch` on twitch.tv is replaced with a wrapper that scrapes Twitch authentication context out of every `/access_token` and `gql` request — Device-ID, Client-Version, Client-Session-Id, Client-ID — and ships th…	1.0.0
2	Privilege Escalation	high	manifest.json (line 52)	Host permissions request broad access to facebook.com, twitter.com, pinterest.com, reddit.com and aliyuncs.com (Alibaba Cloud Object Storage). None of these are needed for the share buttons (which call `window.open` t…	1.0.0
3	Remote Code Loading	high	js/inject-script.js (line 90)	The page's `Worker` constructor is monkey-patched: an arbitrary URL parsed out of Twitch's blob (`getWasmWorkerUrl` reads the original blob via synchronous XHR and extracts the first quoted string) is loaded into a fr…	1.0.0
4	Network Interception	medium	js/background.js (line 1975)	A `webRequest.onBeforeSendHeaders` listener is registered with the `requestHeaders` extra option for googleads.g.doubleclick.net and currently dumps full request objects (URL + headers, including any cookies/auth toke…	1.0.0
5	Network Interception	medium	js/inject-script.js (line 590)	Issues unauthenticated POSTs to Twitch's GraphQL endpoint while spoofing the user's Client-ID, Device-ID, Client-Version and Client-Session-Id (all harvested by the fetch hook above). This impersonates the user inside…	1.0.0
6	Tracking	medium	js/background.js (line 1954)	On install the extension generates a persistent random UUID (`l()` is the bundled uuid v4 generator at lines 1943-1953) and stores it under `uid` in `chrome.storage.local`. This identifier is then used by the Google A…	1.0.0
7	Tracking	medium	js/ga.js (line 1)	Uses the `universal-analytics` Node-style library (rather than the standard browser GA snippet) to send hits server-side via HTTP to Google Analytics property `UA-106810959-27`, keyed by the persistent installation UU…	1.0.0
8	Unauthorized Data Collection	medium	js/popup.ec50b24d.js (line 393)	The popup also instantiates `universal-analytics` with the same property `UA-106810959-27` and binds the persistent installation `uid`. Every popup interaction (toggle adblock on/off, toggle status display, share-butt…	1.0.0
9	Tracking	low	js/background.js (line 1966)	`onMessageExternal` is registered without an `externally_connectable` allow-list in the manifest, so any web page or other extension can probe and detect this extension and obtain its version. This is a fingerprinting…	1.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


fontello.com	-	http://fontello.com
github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
twiclips.com	/user/api-chrome-extension/get-remote-config	https://twiclips.com/user/api-chrome-extension/get-remote-config
twiclips.com	/twitch-download/twitch-adblock	https://twiclips.com/twitch-download/twitch-adblock?utm_medium=extension&utm_source=twitch-adblock
twiclips.com	/twitch-download/question	https://twiclips.com/twitch-download/question?extension=twitch-adblock&uuid=
twiclips.com	-	https://twiclips.com?utm_medium=extension&utm_source=twitch_ad
twiclips.com	-	https://twiclips.com/
chrome.google.com	/webstore/detail/adblocker-for-twitch/mmnpcobofmnpghjnjkfhkfbdndajgfph	https://chrome.google.com/webstore/detail/adblocker-for-twitch/mmnpcobofmnpghjnjkfhkfbdndajgfph
www.google-analytics.com	-	https://www.google-analytics.com
json-schema.org	/draft-06/schema	http://json-schema.org/draft-06/schema#

Showing 1 to 10 of 40 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.101.3.4	IPv4	-
1.3.101.112	IPv4	-
1.3.14.3	IPv4	-
2.5.29.35	IPv4	-
2.5.29.17	IPv4	-
2.5.29.19	IPv4	-
2.5.29.15	IPv4	-
2.5.29.37	IPv4	-
1.3.6.1	IPv4	-
5.5.7.3	IPv4	-
1.3.101.110	IPv4	-
1.3.132.0	IPv4	-
2.5.4.3	IPv4	-
2.5.4.10	IPv4	-
2.5.4.11	IPv4	-
2.5.4.7	IPv4	-
2.5.4.8	IPv4	-
2.5.4.6	IPv4	-
2.5.4.4	IPv4	-
2.5.4.17	IPv4	-
2.5.4.5	IPv4	-
2.5.4.9	IPv4	-
2.5.4.45	IPv4	-
2.5.4.72	IPv4	-
2.5.4.20	IPv4	-
2.5.4.13	IPv4	-
2.5.4.12	IPv4	-
2.5.4.42	IPv4	-
2.5.4.43	IPv4	-
2.5.4.65	IPv4	-

Showing 1 to 30 of 30 rows

Rows per page:

1.7 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Worked great, until it didn't. To be fair, same with the other Twitch adblock. I'm guessing Twitch has changed its ad settings, so this app will need to be updated. Hoping the dev updates it soon. Thank you devs!

Christian Readyhoff·30 Aug 2022

not working

Blue Wallpaper·27 Aug 2022

no funciona,sale ina pantalla diciendo info comercial y a esperar

sonia labandón niño

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Adblocker for Twitch™

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 3 Versions9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews