Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Bitski

CRITICAL RISKRemoved from Chrome Web Store

Bitski

ID: feejiigddaafeojfddjjlmfkabimkell

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.10.1.0

Size

10.25 MB

Rating

3.6/5

Reviews

Users

10,000

Type

Extension

Updated

Nov 28, 2023

Publisher Contextual Analysis

Author: BitskiView Profile
Privacy: Privacy Policy
Help: Help Center
Country: US
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: 548 Market St Suite 84688 San Francisco, CA 94104-5401 US

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

10,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Bitski Wallet Extension

Use Bitski Wallet to securely manage all your Ethereum and Polygon-based tokens in one convenient place. It’s simple to set up, hardware-secured and great for both web3 newcomers and veterans.

User Growth

Showing data from Feb 28, 2023 to Feb 27, 2024

Versions

No change in user count

Compared to 3 months ago

12 versions released in this period

Rating Count

Total: 10 ratings-1 (-9%)

Average Rating

Current: 3.50 / 5.0-1.50

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium2

Low2

Versions scanned

Showing 1 of 12 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.2.5.0 Code review	7

Extension Version	Code Review Findings
1.2.5.0	7

Files with findings

3 distinct paths — top paths by unique finding count:

inpage.js3
assets/chunk-b3d53ed8.js2
manifest.json2

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	assets/chunk-b3d53ed8.js (line 827)	The service worker listens on every single page navigation event (webNavigation.onCommitted) and injects inpage.js into ALL frames of the tab in the MAIN JavaScript world with immediate execution. This means the exten…	1.2.5.0
2	Credential Theft	high	inpage.js (line 6267)	The MetaMaskChoiceProvider class unconditionally returns true for isMetaMask, making this extension impersonate MetaMask to every website. Combined with the broad MAIN-world injection, DApps that check window.ethereum…	1.2.5.0
3	Privilege Escalation	high	inpage.js (line 6228)	The extension overwrites window.ethereum using Object.defineProperty with configurable: false, permanently taking control of the global Ethereum provider object and preventing any other wallet from reclaiming it. Any …	1.2.5.0
4	Privilege Escalation	medium	manifest.json (line 38)	The externally_connectable configuration uses ids: ["*"] which allows any installed Chrome extension—including malicious ones—to send messages directly to this wallet extension via chrome.runtime.sendMessage or chrome…	1.2.5.0
5	Remote Code Loading	medium	inpage.js (line 5983)	The BitskiInjectedProvider class also supports toggling isMetaMask based on a backend-controlled SETTINGS message from the service worker. This means the extension backend can remotely enable MetaMask impersonation on…	1.2.5.0
6	Tracking	low	manifest.json (line 22)	The Content Security Policy permits framing content from consumer-wallet.pages.dev, a Cloudflare Pages domain not under the bitski.com TLD. Additionally, network connections are allowed to *.amplitude.com, enabling be…	1.2.5.0
7	Unauthorized Data Collection	low	assets/chunk-b3d53ed8.js (line 752)	When the service worker handles an Ethereum request, it passes the tab's favIconUrl (the favicon of the website the user is visiting) as the imageUrl in the signing context sent to Bitski's API server. This means the …	1.2.5.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

525

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/2000/svg	http://www.w3.org/2000/svg
consumer-wallet.pages.dev	-	https://consumer-wallet.pages.dev/
sign.bitski.com	-	https://sign.bitski.com
sign-next.bitski.com;	-	https://sign-next.bitski.com;
sign-next.bitski.com	-	https://sign-next.bitski.com
github.com	/kossnocorp%7D/n	https://github.com/kossnocorp}\n
github.com	/leshakoss%7D/n	https://github.com/leshakoss}\n
date-fns.org	/docs/Locale%7D/n	https://date-fns.org/docs/Locale}\n
www.w3.org	/2000/svg/	http://www.w3.org/2000/svg\
github.com	/popperjs/popper-core/issues/1223/n/n	https://github.com/popperjs/popper-core/issues/1223\n\n

Showing 1 to 10 of 530 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


4.2.3.1	IPv4	-
1.189.81.225	IPv4	-
1.3.65.65	IPv4	-
42.44.92.44	IPv4	-
2.168.49.15	IPv4	-
162.186.244.4	IPv4	-
1.68.219.87	IPv4	-
43.242.82.63	IPv4	-
1.83.46.245	IPv4	-
1.10.1.0	IPv4	-
51.141.78.53	IPv4	-
13.93.54.137	IPv4	-
94.237.54.114	IPv4	-
18.218.250.66	IPv4	-
3.11.147.67	IPv4	-
51.15.116.226	IPv4	-
51.15.119.157	IPv4	-
18.138.108.67	IPv4	-
3.209.45.79	IPv4	-
65.108.70.101	IPv4	-
157.90.35.166	IPv4	-
52.169.42.101	IPv4	-
52.3.158.184	IPv4	-
159.89.28.211	IPv4	-
52.176.7.10	IPv4	-
52.176.100.77	IPv4	-
52.232.243.152	IPv4	-
192.81.208.223	IPv4	-
18.168.182.86	IPv4	-
52.14.151.177	IPv4	-
165.22.196.173	IPv4	-
65.108.95.67	IPv4	-
1.2.3.4	IPv4	-
13.3.3.7	IPv4	-

Showing 1 to 34 of 40 rows

Rows per page:

3.9 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

lost my device with passkeys Bitski wallet, how could i login my wallet again? It keeps asking for a device with passkeys verification. Please help...

Lâm Gia Hoàng·26 May 2024

Pretty bad, but ok when it does work.

Artemii Savostianov·28 Dec 2023

one of the worst wallets piece of s***t

Scary Kid·23 Jul 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Bitski

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 12 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating